W0216 13:51:59.907824       1 cmd.go:257] Using insecure, self-signed certificates
I0216 13:51:59.907902       1 crypto.go:594] Generating new CA for cert-manager-operator-signer@1771249919 cert, and key in /tmp/serving-cert-500462724/serving-signer.crt, /tmp/serving-cert-500462724/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1771249919" is unset, resetting to 43800h0m0s!
I0216 13:52:00.211959       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0216 13:52:00.212222       1 observer_polling.go:159] Starting file observer
I0216 13:52:00.295667       1 builder.go:304] cert-manager-operator version -
I0216 13:52:00.296242       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-500462724/tls.crt::/tmp/serving-cert-500462724/tls.key"
I0216 13:52:00.713619       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0216 13:52:00.720289       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0216 13:52:00.720305       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0216 13:52:00.720322       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0216 13:52:00.720327       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0216 13:52:00.722915       1 secure_serving.go:57] Forcing use of http/1.1 only
I0216 13:52:00.722922       1 genericapiserver.go:546] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0216 13:52:00.722934       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0216 13:52:00.722940       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0216 13:52:00.722943       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0216 13:52:00.722944       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0216 13:52:00.722946       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0216 13:52:00.722948       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0216 13:52:00.741395       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0216 13:52:00.758924       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0216 13:52:00.758938       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0216 13:52:00.758957       1 shared_informer.go:350] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0216 13:52:00.758960       1 shared_informer.go:350] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0216 13:52:00.758991       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0216 13:52:00.759005       1 shared_informer.go:350] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0216 13:52:00.759440       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-500462724/tls.crt::/tmp/serving-cert-500462724/tls.key"
I0216 13:52:00.759505       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-500462724/tls.crt::/tmp/serving-cert-500462724/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1771249919\" (2026-02-16 13:51:59 +0000 UTC to 2026-02-16 13:52:00 +0000 UTC (now=2026-02-16 13:52:00.759470772 +0000 UTC))"
I0216 13:52:00.759731       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1771249920\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1771249920\" (2026-02-16 12:52:00 +0000 UTC to 2029-02-16 12:52:00 +0000 UTC (now=2026-02-16 13:52:00.759694992 +0000 UTC))"
I0216 13:52:00.759774       1 secure_serving.go:211] Serving securely on [::]:8443
I0216 13:52:00.759848       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0216 13:52:00.759853       1 genericapiserver.go:696] [graceful-termination] waiting for shutdown to be initiated
I0216 13:52:00.783980       1 reflector.go:430] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0216 13:52:00.784123       1 reflector.go:430] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0216 13:52:00.784264       1 reflector.go:430] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0216 13:52:00.844410       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0216 13:52:00.844439       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"21cd4d8c-d19a-4ee7-a45f-7a47e44a99f6", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"25641", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-67fc656569-trzd5_ded14f35-d022-4301-add8-e3e9d1ae514b became leader
I0216 13:52:00.859434       1 shared_informer.go:357] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0216 13:52:00.859507       1 shared_informer.go:357] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0216 13:52:00.859524       1 shared_informer.go:357] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0216 13:52:00.859749       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-02-16 13:25:59 +0000 UTC to 2036-02-14 13:25:59 +0000 UTC (now=2026-02-16 13:52:00.859730078 +0000 UTC))"
I0216 13:52:00.859771       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-02-16 13:26:00 +0000 UTC to 2036-02-14 13:26:00 +0000 UTC (now=2026-02-16 13:52:00.85976234 +0000 UTC))"
I0216 13:52:00.859782       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-02-16 13:26:00 +0000 UTC to 2036-02-14 13:26:00 +0000 UTC (now=2026-02-16 13:52:00.859775364 +0000 UTC))"
I0216 13:52:00.859791       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-02-16 13:26:01 +0000 UTC to 2036-02-14 13:26:01 +0000 UTC (now=2026-02-16 13:52:00.859785737 +0000 UTC))"
I0216 13:52:00.859810       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ogcn39imv3jofk544kalj7issf8hn7d-kx-03630c953f_customer-system-admin-signer@1771248372\" [] issuer=\"<self>\" (2026-02-16 13:26:11 +0000 UTC to 2026-02-23 13:26:12 +0000 UTC (now=2026-02-16 13:52:00.859797761 +0000 UTC))"
I0216 13:52:00.859825       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ogcn39imv3jofk544kalj7issf8hn7d-kx-03630c953f_sre-system-admin-signer@1771248372\" [] issuer=\"<self>\" (2026-02-16 13:26:11 +0000 UTC to 2026-02-23 13:26:12 +0000 UTC (now=2026-02-16 13:52:00.859816842 +0000 UTC))"
I0216 13:52:00.859834       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-02-16 13:25:59 +0000 UTC to 2036-02-14 13:25:59 +0000 UTC (now=2026-02-16 13:52:00.859828749 +0000 UTC))"
I0216 13:52:00.859985       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-500462724/tls.crt::/tmp/serving-cert-500462724/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1771249919\" (2026-02-16 13:51:59 +0000 UTC to 2026-02-16 13:52:00 +0000 UTC (now=2026-02-16 13:52:00.859976911 +0000 UTC))"
I0216 13:52:00.860124       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1771249920\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1771249920\" (2026-02-16 12:52:00 +0000 UTC to 2029-02-16 12:52:00 +0000 UTC (now=2026-02-16 13:52:00.860115282 +0000 UTC))"
I0216 13:52:00.878960       1 setup_manager.go:52] "setting up operator manager" logger="setup-manager" controller="cert-manager-istio-csr-controller"
I0216 13:52:00.878974       1 setup_manager.go:53] "controller" logger="setup-manager" version=""
I0216 13:52:00.879706       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0216 13:52:00.879946       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0216 13:52:00.879971       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0216 13:52:00.880001       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0216 13:52:00.880011       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0216 13:52:00.880015       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0216 13:52:00.881621       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0216 13:52:00.881655       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0216 13:52:00.881666       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0216 13:52:00.923107       1 reflector.go:430] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923183       1 reflector.go:430] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923206       1 reflector.go:430] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923248       1 reflector.go:430] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923439       1 reflector.go:430] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0216 13:52:00.923730       1 reflector.go:430] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0216 13:52:00.923775       1 reflector.go:430] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923833       1 reflector.go:430] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923841       1 reflector.go:430] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923850       1 reflector.go:430] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.923860       1 reflector.go:430] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.924035       1 reflector.go:430] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.931515       1 reflector.go:430] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.935566       1 reflector.go:430] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.951525       1 reflector.go:430] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0216 13:52:00.980482       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0216 13:52:00.980493       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I0216 13:52:00.980497       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0216 13:52:00.980506       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I0216 13:52:00.980508       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0216 13:52:00.980515       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0216 13:52:00.980529       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0216 13:52:00.980535       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0216 13:52:00.980659       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0216 13:52:00.980891       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0216 13:52:00.980900       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0216 13:52:00.980967       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0216 13:52:00.980979       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
E0216 13:52:00.981018       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0216 13:52:00.981734       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0216 13:52:00.981740       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0216 13:52:00.981745       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
I0216 13:52:00.981741       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
I0216 13:52:00.981749       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I0216 13:52:00.981752       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
E0216 13:52:00.981765       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.981767       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.981777       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.987987       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.987994       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.988001       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.988009       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.999686       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.999701       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.999706       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0216 13:52:00.999731       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0216 13:52:01.053307       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0216 13:52:01.053354       1 recorder.go:104] "controller is starting" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","apiVersion":"operator.openshift.io/v1alpha1"} reason="ControllerStarted"
I0216 13:52:01.053442       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0216 13:52:01.053481       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0216 13:52:01.053505       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0216 13:52:01.053514       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0216 13:52:01.053520       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0216 13:52:01.053537       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0216 13:52:01.053549       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0216 13:52:01.053562       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0216 13:52:01.053575       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0216 13:52:01.053587       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0216 13:52:01.053602       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0216 13:52:01.053617       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0216 13:52:01.053629       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0216 13:52:01.053640       1 controller.go:183] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0216 13:52:01.102977       1 reflector.go:430] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.102978       1 reflector.go:430] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103013       1 reflector.go:430] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103024       1 reflector.go:430] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103041       1 reflector.go:430] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103150       1 reflector.go:430] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103212       1 reflector.go:430] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103290       1 reflector.go:430] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103422       1 reflector.go:430] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.103698       1 reflector.go:430] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.115126       1 reflector.go:430] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.163178       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0216 13:52:01.213733       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0216 13:52:01.261470       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0216 13:52:01.358799       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0216 13:52:01.471328       1 reflector.go:430] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106"
I0216 13:52:01.555770       1 controller.go:217] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0216 13:52:01.559275       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0216 13:52:01.654246       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0216 13:52:01.685322       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0216 13:52:01.841567       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0216 13:52:01.903229       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0216 13:52:02.535661       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0216 13:52:03.018877       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0216 13:52:03.042629       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0216 13:52:03.062965       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0216 13:52:03.686178       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0216 13:52:03.961685       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0216 13:52:04.156091       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0216 13:52:04.179634       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0216 13:52:04.765520       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0216 13:52:04.780318       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0216 13:52:04.810559       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
E0216 13:52:04.921312       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-deployment reconciliation failed: Operation cannot be fulfilled on certmanagers.operator.openshift.io \"cluster\": the object has been modified; please apply your changes to the latest version and try again"
I0216 13:52:04.998303       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0216 13:52:05.345492       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0216 13:52:05.759534       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0216 13:52:05.879781       1 request.go:752] "Waited before sending request" delay="1.069175208s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:06.119528       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0216 13:52:06.137181       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
E0216 13:52:06.300595       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0216 13:52:06.557501       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0216 13:52:06.880358       1 request.go:752] "Waited before sending request" delay="1.161258433s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
E0216 13:52:07.096377       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0216 13:52:07.135749       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0216 13:52:07.334232       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0216 13:52:08.533843       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0216 13:52:09.398413       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0216 13:52:09.661550       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0216 13:52:10.370724       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0216 13:52:10.880200       1 request.go:752] "Waited before sending request" delay="1.129649551s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:10.960474       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0216 13:52:11.087160       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0216 13:52:11.286165       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0216 13:52:11.880211       1 request.go:752] "Waited before sending request" delay="1.106892975s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
I0216 13:52:12.189435       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0216 13:52:12.227462       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0216 13:52:12.271995       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0216 13:52:13.285699       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0216 13:52:14.132405       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0216 13:52:14.541145       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0216 13:52:14.901907       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0216 13:52:14.908503       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0216 13:52:14.918136       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0216 13:52:14.924899       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0216 13:52:14.936930       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0216 13:52:15.080413       1 request.go:752] "Waited before sending request" delay="1.184254177s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:15.762032       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0216 13:52:16.740725       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0216 13:52:17.526143       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0216 13:52:18.680094       1 request.go:752] "Waited before sending request" delay="1.153968885s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:19.680507       1 request.go:752] "Waited before sending request" delay="1.189755807s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-deployment-Deployment&force=true"
E0216 13:52:19.897044       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0216 13:52:20.879669       1 request.go:752] "Waited before sending request" delay="1.392940818s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0216 13:52:23.340281       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0216 13:52:23.938013       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"63a34e55-04db-4f85-93e9-8d1b65f66710", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cert-manager-tokenrequest -n cert-manager because it was missing
I0216 13:52:24.080074       1 request.go:752] "Waited before sending request" delay="1.191926225s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:27.880543       1 request.go:752] "Waited before sending request" delay="1.192063254s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:52:29.479862       1 request.go:752] "Waited before sending request" delay="1.157174959s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 13:53:03.641979       1 request.go:752] "Waited before sending request" delay="1.149905303s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 14:02:02.729571       1 request.go:752] "Waited before sending request" delay="1.191196461s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-deployment-reportDegraded&force=true"
I0216 14:12:02.744460       1 request.go:752] "Waited before sending request" delay="1.011196382s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 14:22:02.856355       1 request.go:752] "Waited before sending request" delay="1.120223368s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0216 14:22:03.856461       1 request.go:752] "Waited before sending request" delay="1.194154055s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-deployment-Deployment&force=true"
I0216 14:42:02.931098       1 request.go:752] "Waited before sending request" delay="1.181006184s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"