time=2026-07-13T16:19:27.005Z level=INFO msg="successfully loaded default package from filesystem" id=cert-manager-debian-bookworm-20230311+deb12u1.0-a3413a37a8e09cc2 path=/packages/cert-manager-package-debian.json
time=2026-07-13T16:19:27.005Z level=INFO msg="registering webhook endpoints"
time=2026-07-13T16:19:27.005Z level=INFO msg="Registering a validating webhook" logger=controller-runtime/builder GVK="trust.cert-manager.io/v1alpha1, Kind=Bundle" path=/validate-trust-cert-manager-io-v1alpha1-bundle
time=2026-07-13T16:19:27.006Z level=INFO msg="Registering webhook" path=/validate-trust-cert-manager-io-v1alpha1-bundle logger=controller-runtime/webhook
time=2026-07-13T16:19:27.006Z level=INFO msg="Starting metrics server" logger=controller-runtime/metrics
time=2026-07-13T16:19:27.006Z level=INFO msg="starting server" name="health probe" addr=[::]:6060
time=2026-07-13T16:19:27.006Z level=INFO msg="Serving metrics server" logger=controller-runtime/metrics bindAddress=0.0.0.0:9402 secure=false
time=2026-07-13T16:19:27.006Z level=INFO msg="Starting webhook server" logger=controller-runtime/webhook
time=2026-07-13T16:19:27.006Z level=INFO msg="Attempting to acquire leader lease..." lock=cert-manager/trust-manager-leader-election
time=2026-07-13T16:19:27.006Z level=INFO msg="Updated current TLS certificate" cert=/tls/tls.crt key=/tls/tls.key logger=controller-runtime/certwatcher
time=2026-07-13T16:19:27.006Z level=INFO msg="Serving webhook server" logger=controller-runtime/webhook host=0.0.0.0 port=6443
time=2026-07-13T16:19:27.006Z level=INFO msg="Starting certificate poll+watcher" cert=/tls/tls.crt key=/tls/tls.key logger=controller-runtime/certwatcher interval=10s
time=2026-07-13T16:19:27.099Z level=INFO msg="Successfully acquired lease" lock=cert-manager/trust-manager-leader-election
time=2026-07-13T16:19:27.099Z level=DEBUG+3 msg="trust-manager-5d5c6867f9-fqwwf_58207a80-b36e-4d95-bd1b-8a82eb5772af became leader" logger=events type=Normal object="{Kind:Lease Namespace:cert-manager Name:trust-manager-leader-election UID:6535e7f9-c340-4689-a6e1-def76939a6cd APIVersion:coordination.k8s.io/v1 ResourceVersion:1035 FieldPath:}" reason=LeaderElection
time=2026-07-13T16:19:27.099Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.PartialObjectMetadata"
time=2026-07-13T16:19:27.099Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1alpha1.Bundle"
time=2026-07-13T16:19:27.099Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.Namespace"
time=2026-07-13T16:19:27.099Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.ConfigMap"
time=2026-07-13T16:19:27.099Z level=INFO msg="Starting EventSource" controller=bundles source="kind source: *v1.Secret"
time=2026-07-13T16:19:27.100Z level=ERROR msg="Server rejected event (will not retry!)" err="events is forbidden: User \"system:serviceaccount:cert-manager:trust-manager\" cannot create resource \"events\" in API group \"\" in the namespace \"cert-manager\"" event="&Event{ObjectMeta:{trust-manager-leader-election.18c1e5c6429c4d3f  cert-manager    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Lease,Namespace:cert-manager,Name:trust-manager-leader-election,UID:6535e7f9-c340-4689-a6e1-def76939a6cd,APIVersion:coordination.k8s.io/v1,ResourceVersion:1035,FieldPath:,},Reason:LeaderElection,Message:trust-manager-5d5c6867f9-fqwwf_58207a80-b36e-4d95-bd1b-8a82eb5772af became leader,Source:EventSource{Component:trust-manager-5d5c6867f9-fqwwf_58207a80-b36e-4d95-bd1b-8a82eb5772af,Host:,},FirstTimestamp:2026-07-13 16:19:27.099252031 +0000 UTC m=+0.299871703,LastTimestamp:2026-07-13 16:19:27.099252031 +0000 UTC m=+0.299871703,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:trust-manager-5d5c6867f9-fqwwf_58207a80-b36e-4d95-bd1b-8a82eb5772af,ReportingInstance:,}"
time=2026-07-13T16:19:28.301Z level=INFO msg="Starting Controller" controller=bundles
time=2026-07-13T16:19:28.301Z level=INFO msg="Starting workers" controller=bundles "worker count"=1
time=2026-07-13T16:21:43.541Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:21:43.803Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:22:11.244Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:22:13.345Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:22:34.943Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:22:45.842Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:22:53.801Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:23:01.140Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:23:09.300Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:23:10.945Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:23:11.843Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:24:45.401Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:25:23.239Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:25:23.702Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:27:12.554Z level=ERROR msg="failed sync bundle to target namespace" controller=bundles namespace="" name=trusted-ca reconcileID=e53ee1a4-8a72-4fb1-b2a3-14a2f2603e16 bundle=trusted-ca target=invalid-git-config-knlt/trusted-ca err="failed to patch ConfigMap invalid-git-config-knlt/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace invalid-git-config-knlt because it is being terminated"
time=2026-07-13T16:27:12.554Z level=DEBUG+3 msg="Failed to sync target ConfigMap in Namespace \"invalid-git-config-knlt\": failed to patch ConfigMap invalid-git-config-knlt/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace invalid-git-config-knlt because it is being terminated" logger=events type=Warning object=nil action=SyncFailed reason=SyncConfigMapTargetFailed
time=2026-07-13T16:27:12.564Z level=ERROR msg="Reconciler error" controller=bundles namespace="" name=trusted-ca reconcileID=e53ee1a4-8a72-4fb1-b2a3-14a2f2603e16 err="failed to patch ConfigMap invalid-git-config-knlt/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace invalid-git-config-knlt because it is being terminated"
time=2026-07-13T16:27:12.855Z level=ERROR msg="failed sync bundle to target namespace" controller=bundles namespace="" name=trusted-ca reconcileID=6d4af60f-2efb-4c46-8b10-141e82d55807 bundle=trusted-ca target=plan-and-admission-managed/trusted-ca err="failed to patch ConfigMap plan-and-admission-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace plan-and-admission-managed because it is being terminated"
time=2026-07-13T16:27:12.856Z level=DEBUG+3 msg="Failed to sync target ConfigMap in Namespace \"plan-and-admission-managed\": failed to patch ConfigMap plan-and-admission-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace plan-and-admission-managed because it is being terminated" logger=events type=Warning object=nil action=SyncFailed reason=SyncConfigMapTargetFailed
time=2026-07-13T16:27:12.865Z level=ERROR msg="Reconciler error" controller=bundles namespace="" name=trusted-ca reconcileID=6d4af60f-2efb-4c46-8b10-141e82d55807 err="failed to patch ConfigMap plan-and-admission-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace plan-and-admission-managed because it is being terminated"
time=2026-07-13T16:27:13.543Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:27:14.242Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:27:37.041Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:27:47.042Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:27:47.663Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:29:08.152Z level=ERROR msg="failed sync bundle to target namespace" controller=bundles namespace="" name=trusted-ca reconcileID=3b016396-b84e-462b-b0cd-fcfcf10582d9 bundle=trusted-ca target=managed-pr-quota-deny-managed/trusted-ca err="failed to patch ConfigMap managed-pr-quota-deny-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace managed-pr-quota-deny-managed because it is being terminated"
time=2026-07-13T16:29:08.152Z level=DEBUG+3 msg="Failed to sync target ConfigMap in Namespace \"managed-pr-quota-deny-managed\": failed to patch ConfigMap managed-pr-quota-deny-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace managed-pr-quota-deny-managed because it is being terminated" logger=events type=Warning object=nil action=SyncFailed reason=SyncConfigMapTargetFailed
time=2026-07-13T16:29:08.161Z level=ERROR msg="Reconciler error" controller=bundles namespace="" name=trusted-ca reconcileID=3b016396-b84e-462b-b0cd-fcfcf10582d9 err="failed to patch ConfigMap managed-pr-quota-deny-managed/trusted-ca: configmaps \"trusted-ca\" is forbidden: unable to create new content in namespace managed-pr-quota-deny-managed because it is being terminated"
time=2026-07-13T16:29:08.601Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced
time=2026-07-13T16:29:09.139Z level=DEBUG+3 msg="Successfully synced Bundle to all namespaces" logger=events type=Normal object=nil action=Synced reason=Synced