I1011 10:23:45.312453 1 cainjector.go:47] "starting cert-manager ca-injector" logger="cert-manager.cainjector" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64" I1011 10:23:45.314069 1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1011 10:23:45.314088 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true I1011 10:23:45.314092 1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true I1011 10:23:45.314094 1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1011 10:23:45.314097 1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true I1011 10:23:45.314099 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true I1011 10:23:45.314120 1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true I1011 10:23:45.314126 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1011 10:23:45.314128 1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1011 10:23:45.314130 1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true I1011 10:23:45.419191 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="mutatingwebhookconfiguration" I1011 10:23:45.419284 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="validatingwebhookconfiguration" I1011 10:23:45.419323 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="apiservice" I1011 10:23:45.419375 1 setup.go:122] "Registering a reconciler for injectable" logger="cert-manager" kind="customresourcedefinition" I1011 10:23:45.419443 1 server.go:208] "Starting metrics server" logger="cert-manager.controller-runtime.metrics" I1011 10:23:45.419725 1 server.go:247] "Serving metrics server" logger="cert-manager.controller-runtime.metrics" bindAddress="0.0.0.0:9402" secure=false I1011 10:23:45.420977 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.ValidatingWebhookConfiguration" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:45.421017 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.MutatingWebhookConfiguration" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:45.422511 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.APIService" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:45.812851 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.CustomResourceDefinition" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:45.820782 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1011 10:23:45.827153 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager" lock="kube-system/cert-manager-cainjector-leader-election" I1011 10:23:45.827207 1 recorder.go:116] "cert-manager-cainjector-855677dc44-9rhkp_90e74fc9-b021-4ee4-9f55-8b7d50d3a576 became leader" logger="cert-manager.events" type="Normal" object={"kind":"Lease","namespace":"kube-system","name":"cert-manager-cainjector-leader-election","uid":"de60ca42-4842-42ac-a811-861a82f3dace","apiVersion":"coordination.k8s.io/v1","resourceVersion":"1196"} reason="LeaderElection" I1011 10:23:45.827473 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.Certificate" I1011 10:23:45.827600 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.827603 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.Certificate" I1011 10:23:45.827679 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.827754 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.Certificate" I1011 10:23:45.827812 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.APIService" I1011 10:23:45.827886 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.827931 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.827953 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.MutatingWebhookConfiguration" I1011 10:23:45.828005 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.828030 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.ValidatingWebhookConfiguration" I1011 10:23:45.828086 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.828089 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.Certificate" I1011 10:23:45.909253 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.CustomResourceDefinition" I1011 10:23:45.910274 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.910307 1 controller.go:369] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata[v1 Secret]" I1011 10:23:45.910414 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:45.910819 1 reflector.go:507] "Caches populated" logger="cert-manager.controller-runtime.cache" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1011 10:23:46.029313 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" I1011 10:23:46.029339 1 controller.go:305] "Starting workers" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" worker count=1 I1011 10:23:46.029341 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" I1011 10:23:46.029314 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" I1011 10:23:46.029356 1 controller.go:305] "Starting workers" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" worker count=1 I1011 10:23:46.029363 1 controller.go:305] "Starting workers" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" worker count=1 I1011 10:23:46.037702 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I1011 10:23:46.040574 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I1011 10:23:46.042397 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I1011 10:23:46.043434 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I1011 10:23:46.111541 1 controller.go:302] "Starting Controller" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I1011 10:23:46.111563 1 controller.go:305] "Starting workers" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 E1011 10:23:51.935451 1 sources.go:201] "unable to fetch associated secret" err="secrets \"trust-manager-tls\" not found" logger="cert-manager" kind="validatingwebhookconfiguration" name="trust-manager" secret="cert-manager/trust-manager-tls" I1011 10:23:51.935483 1 reconciler.go:113] "could not find any ca data in data source for target" logger="cert-manager" kind="validatingwebhookconfiguration" name="trust-manager" I1011 10:23:52.879396 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="trust-manager" I1011 10:23:52.884563 1 reconciler.go:137] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" name="trust-manager"