time=2026-03-18T10:08:54.733Z level=INFO msg="successfully loaded default package from filesystem" id=cert-manager-debian-bookworm-20230311+deb12u1.0-a3413a37a8e09cc2 path=/packages/cert-manager-package-debian.json time=2026-03-18T10:08:54.733Z level=INFO msg="registering webhook endpoints" time=2026-03-18T10:08:54.733Z level=INFO msg="Registering a validating webhook" logger=controller-runtime/builder GVK="trust.cert-manager.io/v1alpha1, Kind=Bundle" path=/validate-trust-cert-manager-io-v1alpha1-bundle time=2026-03-18T10:08:54.733Z level=INFO msg="Registering webhook" path=/validate-trust-cert-manager-io-v1alpha1-bundle logger=controller-runtime/webhook time=2026-03-18T10:08:54.733Z level=INFO msg="Starting metrics server" logger=controller-runtime/metrics time=2026-03-18T10:08:54.733Z level=INFO msg="Serving metrics server" logger=controller-runtime/metrics bindAddress=0.0.0.0:9402 secure=false time=2026-03-18T10:08:54.733Z level=INFO msg="starting server" name="health probe" addr=[::]:6060 time=2026-03-18T10:08:54.733Z level=INFO msg="Starting webhook server" logger=controller-runtime/webhook time=2026-03-18T10:08:54.733Z level=INFO msg="Updated current TLS certificate" cert=/tls/tls.crt key=/tls/tls.key logger=controller-runtime/certwatcher time=2026-03-18T10:08:54.733Z level=INFO msg="Attempting to acquire leader lease..." lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:08:54.733Z level=INFO msg="Serving webhook server" logger=controller-runtime/webhook host=0.0.0.0 port=6443 time=2026-03-18T10:08:54.733Z level=INFO msg="Starting certificate poll+watcher" cert=/tls/tls.crt key=/tls/tls.key logger=controller-runtime/certwatcher interval=10s time=2026-03-18T10:08:54.737Z level=INFO msg="Successfully acquired lease" lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:08:54.737Z level=DEBUG+3 msg="trust-manager-5d5c6867f9-hkn26_73a4eee1-6b9e-4b62-a6ea-0353ab39465b became leader" logger=events type=Normal object="{Kind:Lease Namespace:cert-manager Name:trust-manager-leader-election UID:8f97f6c3-75b5-4d57-9bb8-b3fa19324081 APIVersion:coordination.k8s.io/v1 ResourceVersion:831 FieldPath:}" reason=LeaderElection time=2026-03-18T10:08:54.737Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.PartialObjectMetadata" time=2026-03-18T10:08:54.738Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1alpha1.Bundle" time=2026-03-18T10:08:54.738Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.ConfigMap" time=2026-03-18T10:08:54.738Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.Secret" time=2026-03-18T10:08:54.738Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.Namespace" time=2026-03-18T10:08:54.828Z level=ERROR msg="Server rejected event (will not retry!)" err="events is forbidden: User \"system:serviceaccount:cert-manager:trust-manager\" cannot create resource \"events\" in API group \"\" in the namespace \"cert-manager\"" event="&Event{ObjectMeta:{trust-manager-leader-election.189de7a7797e8b8e cert-manager 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Lease,Namespace:cert-manager,Name:trust-manager-leader-election,UID:8f97f6c3-75b5-4d57-9bb8-b3fa19324081,APIVersion:coordination.k8s.io/v1,ResourceVersion:831,FieldPath:,},Reason:LeaderElection,Message:trust-manager-5d5c6867f9-hkn26_73a4eee1-6b9e-4b62-a6ea-0353ab39465b became leader,Source:EventSource{Component:trust-manager-5d5c6867f9-hkn26_73a4eee1-6b9e-4b62-a6ea-0353ab39465b,Host:,},FirstTimestamp:2026-03-18 10:08:54.737734542 +0000 UTC m=+0.109644630,LastTimestamp:2026-03-18 10:08:54.737734542 +0000 UTC m=+0.109644630,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:trust-manager-5d5c6867f9-hkn26_73a4eee1-6b9e-4b62-a6ea-0353ab39465b,ReportingInstance:,}" time=2026-03-18T10:08:55.938Z level=INFO msg="Starting Controller" controller=bundles time=2026-03-18T10:08:55.938Z level=INFO msg="Starting workers" controller=bundles "worker count"=1 time=2026-03-18T10:11:25.883Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:12:07.528Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:12:09.830Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:12:29.728Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:12:44.644Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:12:55.145Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:13:07.544Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:13:17.144Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:13:22.732Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:13:25.024Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:14:59.629Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:15:28.730Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:15:28.934Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:22:38.726Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced time=2026-03-18T10:26:31.216Z level=ERROR msg="Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/trust-manager-leader-election?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:27:10.853Z level=ERROR msg="Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/trust-manager-leader-election?timeout=5s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:28:38.001Z level=ERROR msg="Failed to update lease optimistically, falling back to slow path" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/trust-manager-leader-election?timeout=5s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:29:41.430Z level=ERROR msg="Failed to update lease optimistically, falling back to slow path" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io trust-manager-leader-election)" lock=cert-manager/trust-manager-leader-election time=2026-03-18T10:37:00.431Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced