I1006 16:02:22.645371 1 cainjector.go:47] "starting cert-manager ca-injector" logger="cert-manager.cainjector" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64" I1006 16:02:22.646425 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true I1006 16:02:22.646436 1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true I1006 16:02:22.646439 1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true I1006 16:02:22.646440 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1006 16:02:22.646442 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true I1006 16:02:22.646443 1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true I1006 16:02:22.646444 1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true I1006 16:02:22.646446 1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1006 16:02:22.646447 1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1006 16:02:22.646448 1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1006 16:02:22.748138 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="mutatingwebhookconfiguration" I1006 16:02:22.748232 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="validatingwebhookconfiguration" I1006 16:02:22.748266 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="apiservice" I1006 16:02:22.748302 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="customresourcedefinition" I1006 16:02:22.748361 1 server.go:208] "Starting metrics server" logger="cert-manager.controller-runtime.metrics" I1006 16:02:22.748541 1 server.go:247] "Serving metrics server" logger="cert-manager.controller-runtime.metrics" bindAddress="0.0.0.0:9402" secure=false I1006 16:02:22.750869 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.MutatingWebhookConfiguration" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:22.751899 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.APIService" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:22.752082 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.ValidatingWebhookConfiguration" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:24.045070 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.CustomResourceDefinition" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:24.049840 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1006 16:02:38.318264 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1006 16:02:38.318298 1 recorder.go:116] "cert-manager-cainjector-855677dc44-f7bzk_87c68e07-ff2b-4850-b453-e138eb81dfe0 became leader" logger="cert-manager.events" type="Normal" object={"kind":"Lease","namespace":"kube-system","name":"cert-manager-cainjector-leader-election","uid":"495b676e-d7e5-4905-84ad-f04b1c459b70","apiVersion":"coordination.k8s.io/v1","resourceVersion":"12489"} reason="LeaderElection" I1006 16:02:38.318578 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.Certificate" I1006 16:02:38.318700 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.Certificate" I1006 16:02:38.318732 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.MutatingWebhookConfiguration" I1006 16:02:38.318793 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.318820 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.Certificate" I1006 16:02:38.318855 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.APIService" I1006 16:02:38.318867 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.318938 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.318964 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.319012 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.ValidatingWebhookConfiguration" I1006 16:02:38.319084 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.319114 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.319230 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.Certificate" I1006 16:02:38.319303 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.CustomResourceDefinition" I1006 16:02:38.319382 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:38.319407 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1006 16:02:44.502244 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:44.505169 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1006 16:02:44.620488 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I1006 16:02:44.620487 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" I1006 16:02:44.620508 1 controller.go:305] "Starting workers" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 I1006 16:02:44.620517 1 controller.go:305] "Starting workers" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" worker count=1 I1006 16:02:44.620812 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" I1006 16:02:44.620821 1 controller.go:305] "Starting workers" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" worker count=1 I1006 16:02:44.621748 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" I1006 16:02:44.621766 1 controller.go:305] "Starting workers" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" worker count=1 I1006 16:02:44.624443 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I1006 16:02:44.625413 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I1006 16:02:44.627522 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="trust-manager" I1006 16:02:44.629450 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" name="integration-service-mutating-webhook-configuration" I1006 16:02:44.631864 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="integration-service-validating-webhook-configuration" I1006 16:02:44.633615 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" name="release-service-mutating-webhook-configuration" I1006 16:02:44.638635 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="release-service-validating-webhook-configuration" I1006 16:02:44.699847 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="releaseplanadmissions.appstudio.redhat.com" I1006 16:02:44.714319 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="integrationtestscenarios.appstudio.redhat.com" I1006 16:02:44.717981 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="internalservicesconfigs.appstudio.redhat.com" I1006 16:02:44.722940 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="internalrequests.appstudio.redhat.com" I1006 16:02:44.728368 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="componentgroups.appstudio.redhat.com" I1006 16:02:44.733820 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="releaseserviceconfigs.appstudio.redhat.com" I1006 16:02:44.745915 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="nudgeconfigs.appstudio.redhat.com" I1006 16:02:44.808380 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="releases.appstudio.redhat.com" I1006 16:02:44.862896 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="customresourcedefinition" name="releaseplans.appstudio.redhat.com" I1006 16:03:18.122483 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" E1006 16:03:18.122786 1 leaderelection.go:461] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1006 16:03:37.224409 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" E1006 16:03:38.248261 1 leaderelection.go:461] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1006 16:03:48.123120 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" E1006 16:03:49.128484 1 leaderelection.go:461] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1006 16:03:58.122218 1 leaderelection.go:304] "Failed to renew lease" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" err="context deadline exceeded" E1006 16:03:58.122590 1 leaderelection.go:323] "error retrieving resource lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-cainjector-leader-election?timeout=20s\": dial tcp 10.96.0.1:443: connect: connection refused" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" E1006 16:03:58.122661 1 main.go:43] "error executing command" err="error running manager: leader election lost" logger="cert-manager"