W1008 14:49:25.186688 1 cmd.go:264] Using insecure, self-signed certificates I1008 14:49:25.186828 1 crypto.go:625] Generating new CA for cert-manager-operator-signer@1791470965 cert, and key in /tmp/serving-cert-4259383604/serving-signer.crt, /tmp/serving-cert-4259383604/serving-signer.key Validity period of the certificate for "cert-manager-operator-signer@1791470965" is unset, resetting to 43800h0m0s! I1008 14:49:25.396712 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I1008 14:49:25.397003 1 observer_polling.go:159] Starting file observer I1008 14:49:25.464287 1 builder.go:313] cert-manager-operator version - I1008 14:49:25.464990 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4259383604/tls.crt::/tmp/serving-cert-4259383604/tls.key" I1008 14:49:25.640213 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I1008 14:49:25.650545 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I1008 14:49:25.650558 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I1008 14:49:25.650574 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I1008 14:49:25.650578 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I1008 14:49:25.653534 1 secure_serving.go:57] Forcing use of http/1.1 only I1008 14:49:25.653548 1 genericapiserver.go:555] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I1008 14:49:25.662408 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I1008 14:49:25.662452 1 shared_informer.go:370] "Waiting for caches to sync" I1008 14:49:25.662467 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I1008 14:49:25.662481 1 shared_informer.go:370] "Waiting for caches to sync" I1008 14:49:25.662492 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I1008 14:49:25.662509 1 shared_informer.go:370] "Waiting for caches to sync" I1008 14:49:25.662753 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4259383604/tls.crt::/tmp/serving-cert-4259383604/tls.key" I1008 14:49:25.663065 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4259383604/tls.crt::/tmp/serving-cert-4259383604/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791470965\" (2026-10-08 14:49:24 +0000 UTC to 2026-11-07 14:49:25 +0000 UTC (now=2026-10-08 14:49:25.663040991 +0000 UTC))" I1008 14:49:25.663343 1 leaderelection.go:258] "Attempting to acquire leader lease..." lock="cert-manager-operator/cert-manager-operator-lock" I1008 14:49:25.663374 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791470965\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791470965\" (2026-10-08 13:49:25 +0000 UTC to 2029-10-08 13:49:25 +0000 UTC (now=2026-10-08 14:49:25.66334732 +0000 UTC))" I1008 14:49:25.663393 1 secure_serving.go:211] Serving securely on [::]:8443 I1008 14:49:25.663471 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I1008 14:49:25.663661 1 genericapiserver.go:705] [graceful-termination] waiting for shutdown to be initiated I1008 14:49:25.674173 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I1008 14:49:25.674269 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I1008 14:49:25.674319 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183" I1008 14:49:25.684313 1 leaderelection.go:272] "Successfully acquired lease" lock="cert-manager-operator/cert-manager-operator-lock" I1008 14:49:25.684351 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"948cc0b2-a850-4f7d-97af-fa6a78288d0f", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"29598", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-59b54c8f9b-dq4xn_358e4b62-9888-4a13-88c5-d6cee34baf8a became leader I1008 14:49:25.706620 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment I1008 14:49:25.706664 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment I1008 14:49:25.706700 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources I1008 14:49:25.706717 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment I1008 14:49:25.707005 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined I1008 14:49:25.707038 1 base_controller.go:76] Waiting for caches to sync for cert-manager-console-resources I1008 14:49:25.707050 1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager I1008 14:49:25.707063 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources I1008 14:49:25.707141 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources I1008 14:49:25.707143 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources I1008 14:49:25.719879 1 reflector.go:446] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:126" I1008 14:49:25.724115 1 reflector.go:446] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.724191 1 reflector.go:446] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.724319 1 reflector.go:446] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.724430 1 reflector.go:446] "Caches populated" type="*v1.APIServer" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:126" I1008 14:49:25.725097 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.726427 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.727499 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.727580 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.729948 1 reflector.go:446] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.734933 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.740634 1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet="" I1008 14:49:25.740647 1 features.go:147] "IstioCSR feature: enabled" logger="features" I1008 14:49:25.740652 1 features.go:159] "TrustManager feature: internal featuregate is not enabled" logger="features" I1008 14:49:25.740657 1 setup_manager.go:123] "setting up unified operator manager" logger="setup-manager" I1008 14:49:25.740663 1 setup_manager.go:124] "controller" logger="setup-manager" version="" I1008 14:49:25.740669 1 setup_manager.go:125] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false I1008 14:49:25.743271 1 reflector.go:446] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.747868 1 reflector.go:446] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.763168 1 shared_informer.go:377] "Caches are synced" I1008 14:49:25.763168 1 shared_informer.go:377] "Caches are synced" I1008 14:49:25.763251 1 shared_informer.go:377] "Caches are synced" I1008 14:49:25.763326 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-08 14:13:15 +0000 UTC to 2036-10-05 14:13:15 +0000 UTC (now=2026-10-08 14:49:25.763304818 +0000 UTC))" I1008 14:49:25.763571 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4259383604/tls.crt::/tmp/serving-cert-4259383604/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791470965\" (2026-10-08 14:49:24 +0000 UTC to 2026-11-07 14:49:25 +0000 UTC (now=2026-10-08 14:49:25.763560352 +0000 UTC))" I1008 14:49:25.763773 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791470965\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791470965\" (2026-10-08 13:49:25 +0000 UTC to 2029-10-08 13:49:25 +0000 UTC (now=2026-10-08 14:49:25.763763782 +0000 UTC))" I1008 14:49:25.763880 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-10-08 14:13:15 +0000 UTC to 2036-10-05 14:13:15 +0000 UTC (now=2026-10-08 14:49:25.763871236 +0000 UTC))" I1008 14:49:25.763894 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-10-08 14:13:16 +0000 UTC to 2036-10-05 14:13:16 +0000 UTC (now=2026-10-08 14:49:25.763887716 +0000 UTC))" I1008 14:49:25.763904 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-10-08 14:13:16 +0000 UTC to 2036-10-05 14:13:16 +0000 UTC (now=2026-10-08 14:49:25.7638977 +0000 UTC))" I1008 14:49:25.763920 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-10-08 14:13:17 +0000 UTC to 2036-10-05 14:13:17 +0000 UTC (now=2026-10-08 14:49:25.763907343 +0000 UTC))" I1008 14:49:25.763933 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-10-08 14:13:17 +0000 UTC to 2036-10-05 14:13:17 +0000 UTC (now=2026-10-08 14:49:25.763926383 +0000 UTC))" I1008 14:49:25.763943 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2talaln7f8jaj9uj350puqsvb5tjjsao-kx-cfd22ae769_customer-system-admin-signer@1791468807\" [] issuer=\"\" (2026-10-08 14:13:26 +0000 UTC to 2026-10-15 14:13:27 +0000 UTC (now=2026-10-08 14:49:25.763936007 +0000 UTC))" I1008 14:49:25.763957 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2talaln7f8jaj9uj350puqsvb5tjjsao-kx-cfd22ae769_sre-system-admin-signer@1791468807\" [] issuer=\"\" (2026-10-08 14:13:26 +0000 UTC to 2026-10-15 14:13:27 +0000 UTC (now=2026-10-08 14:49:25.763949336 +0000 UTC))" I1008 14:49:25.763966 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-08 14:13:15 +0000 UTC to 2036-10-05 14:13:15 +0000 UTC (now=2026-10-08 14:49:25.763960517 +0000 UTC))" I1008 14:49:25.764141 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4259383604/tls.crt::/tmp/serving-cert-4259383604/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791470965\" (2026-10-08 14:49:24 +0000 UTC to 2026-11-07 14:49:25 +0000 UTC (now=2026-10-08 14:49:25.764133702 +0000 UTC))" I1008 14:49:25.764333 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791470965\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791470965\" (2026-10-08 13:49:25 +0000 UTC to 2029-10-08 13:49:25 +0000 UTC (now=2026-10-08 14:49:25.764325432 +0000 UTC))" I1008 14:49:25.766194 1 setup_manager.go:158] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller" I1008 14:49:25.766288 1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics" I1008 14:49:25.766395 1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false I1008 14:49:25.766496 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR" I1008 14:49:25.766516 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer" I1008 14:49:25.766550 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole" I1008 14:49:25.766553 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding" I1008 14:49:25.766573 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding" I1008 14:49:25.766589 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap" I1008 14:49:25.766605 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role" I1008 14:49:25.766608 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate" I1008 14:49:25.766625 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service" I1008 14:49:25.766629 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount" I1008 14:49:25.766639 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy" I1008 14:49:25.766643 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment" I1008 14:49:25.766653 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata" I1008 14:49:25.766663 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer" I1008 14:49:25.767977 1 reflector.go:446] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.776108 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:161" I1008 14:49:25.779014 1 reflector.go:446] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.784909 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.785095 1 reflector.go:446] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.785177 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.785344 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.789546 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.832028 1 reflector.go:446] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.832037 1 reflector.go:446] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.832044 1 reflector.go:446] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.832037 1 reflector.go:446] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.836630 1 reflector.go:446] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.836657 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.863963 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:25.934072 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1008 14:49:26.068448 1 controller.go:303] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" I1008 14:49:26.068472 1 controller.go:306] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1 I1008 14:49:26.775206 1 reflector.go:446] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:126" I1008 14:49:26.807087 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment I1008 14:49:26.807101 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources I1008 14:49:26.807112 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ... I1008 14:49:26.807115 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources I1008 14:49:26.807111 1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment I1008 14:49:26.807126 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ... I1008 14:49:26.807127 1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment I1008 14:49:26.807104 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ... I1008 14:49:26.807120 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ... I1008 14:49:26.807130 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ... E1008 14:49:26.807197 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1008 14:49:26.807207 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined I1008 14:49:26.807211 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ... E1008 14:49:26.807197 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1008 14:49:26.807219 1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources I1008 14:49:26.807222 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ... I1008 14:49:26.807225 1 base_controller.go:82] Caches are synced for cert-manager-console-resources I1008 14:49:26.807228 1 base_controller.go:119] Starting #1 worker of cert-manager-console-resources controller ... E1008 14:49:26.807245 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1008 14:49:26.807504 1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources I1008 14:49:26.807528 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ... I1008 14:49:26.807507 1 base_controller.go:82] Caches are synced for DefaultCertManager I1008 14:49:26.807551 1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ... E1008 14:49:26.807773 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1008 14:49:26.808317 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager E1008 14:49:26.812310 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.814051 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.814057 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.814055 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.822948 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.825077 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.825963 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1008 14:49:26.825973 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1008 14:49:26.829290 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-acme-issuer-sample" I1008 14:49:26.846793 1 core.go:121] Namespace "cert-manager" changes: {"metadata":{"annotations":{"openshift.io/cluster-monitoring":"true"}}} I1008 14:49:26.860330 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I1008 14:49:26.860349 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-certificate-sample" I1008 14:49:26.869072 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceUpdated' Updated Namespace/cert-manager because it changed I1008 14:49:26.905166 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I1008 14:49:26.905192 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-issuer-sample" I1008 14:49:26.937381 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found I1008 14:49:26.937562 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleQuickStartCreated' Created ConsoleQuickStart "cert-manager-example" I1008 14:49:26.964155 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I1008 14:49:27.017160 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I1008 14:49:27.017162 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing I1008 14:49:27.039078 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing I1008 14:49:27.309920 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing I1008 14:49:27.328299 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I1008 14:49:27.464077 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing I1008 14:49:27.875141 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I1008 14:49:28.229767 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing I1008 14:49:28.245185 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: rolebindings.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found I1008 14:49:28.758516 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing I1008 14:49:29.241099 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I1008 14:49:29.288342 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing I1008 14:49:29.612371 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I1008 14:49:29.631199 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing I1008 14:49:29.638341 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing I1008 14:49:29.667173 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing I1008 14:49:29.751079 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I1008 14:49:30.314151 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I1008 14:49:30.723400 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing I1008 14:49:30.765135 1 request.go:752] "Waited before sending request" delay="1.097918313s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:49:30.931494 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing E1008 14:49:31.183527 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found" I1008 14:49:31.269285 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing I1008 14:49:31.889201 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I1008 14:49:31.965153 1 request.go:752] "Waited before sending request" delay="1.173147309s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" E1008 14:49:31.993411 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found" I1008 14:49:32.084329 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing I1008 14:49:33.303588 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I1008 14:49:34.076549 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I1008 14:49:34.265840 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I1008 14:49:34.886400 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I1008 14:49:35.284531 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I1008 14:49:35.564636 1 request.go:752] "Waited before sending request" delay="1.115062962s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:49:35.899930 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing I1008 14:49:36.634835 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: rolebindings.rbac.authorization.k8s.io "cert-manager:leaderelection" not found I1008 14:49:37.692301 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I1008 14:49:37.711200 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing I1008 14:49:37.792636 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing I1008 14:49:38.437068 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found I1008 14:49:38.873483 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I1008 14:49:39.364855 1 request.go:752] "Waited before sending request" delay="1.089797505s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:49:39.684168 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing I1008 14:49:40.898648 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I1008 14:49:41.673297 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I1008 14:49:42.069581 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I1008 14:49:42.865425 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I1008 14:49:42.964719 1 request.go:752] "Waited before sending request" delay="1.164474858s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:49:43.964861 1 request.go:752] "Waited before sending request" delay="1.099437289s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:49:45.164470 1 request.go:752] "Waited before sending request" delay="1.194133034s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" E1008 14:49:45.178791 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]" I1008 14:49:46.164800 1 request.go:752] "Waited before sending request" delay="1.39404053s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-deployment-reportDegraded&force=true" I1008 14:49:48.886060 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I1008 14:49:49.468769 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I1008 14:49:53.764584 1 request.go:752] "Waited before sending request" delay="1.122280934s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:50:26.814912 1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]} I1008 14:50:26.823521 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I1008 14:50:26.829884 1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ4VENDQVV1Z0F3SUJBZ0lVQVZsTzhROGRWdXZ0cU5nOVl0eEw0bUVXVzd3d0NnWUlLb1pJemowRUF3TXcKSWpFZ01CNEdBMVVFQXhNWFkyVnlkQzF0WVc1aFoyVnlMWGRsWW1odmIyc3RZMkV3SGhjTk1qWXhNREE0TVRRMApPVE16V2hjTk1qY3hNREE0TVRRME9UTXpXakFpTVNBd0hnWURWUVFERXhkalpYSjBMVzFoYm1GblpYSXRkMlZpCmFHOXZheTFqWVRCMk1CQUdCeXFHU000OUFnRUdCU3VCQkFBaUEySUFCR0FlUzVyT3RXMGxTeGxCWUswakFQT3QKRWNMazlXdFpZZUsyUFdtdUtQQU1kOUw0b2szTjVlcFBHWE5lNWhjalp0aHp4aUp6QVJ6cXNHYzY2MkpTdUxIbgp2czVWVytTblUybjF5MmpYek1US2dqY0NyTWVmRjF1azBxZ1JXNzU2YUtOQ01FQXdEZ1lEVlIwUEFRSC9CQVFECkFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGSm1DdmNDN0RaYVd3ZXpsV0laOVBtY1cKVnRYNk1Bb0dDQ3FHU000OUJBTURBMmdBTUdVQ01HNkplcU5kNy9oR3c2ejhuQ1FIRmUrTkd2aFBRMlBEYTVFSApNelp5RG5ha1d2YnpMbEk1RndXcFM3RnlPRlU1UEFJeEFNaDNqaVlGb1FQZ2plRmF0TjNmR2dkSVVlejlYMVZ6CkFSMFU3QlFpdllSc1Nua0ZvWmRYcUJiSWlZNnpEV1R3a3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]} I1008 14:50:26.841638 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"fa326ab5-a19b-436e-ac47-5a9c470fe074", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I1008 14:59:29.326225 1 request.go:752] "Waited before sending request" delay="1.18664247s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1008 14:59:31.126699 1 request.go:752] "Waited before sending request" delay="1.18474808s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"