I0403 00:11:40.012850 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0403 00:11:40.012902 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0403 00:11:40.012910 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0403 00:11:40.012915 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0403 00:11:40.033494 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="mutatingwebhookconfiguration" I0403 00:11:40.035376 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="validatingwebhookconfiguration" I0403 00:11:40.035413 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="apiservice" I0403 00:11:40.037107 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="customresourcedefinition" I0403 00:11:40.037224 1 server.go:208] "Starting metrics server" logger="cert-manager.controller-runtime.metrics" I0403 00:11:40.038540 1 server.go:247] "Serving metrics server" logger="cert-manager.controller-runtime.metrics" bindAddress="0.0.0.0:9402" secure=false I0403 00:11:40.042865 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:40.043315 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:40.044913 1 reflector.go:376] Caches populated for *v1.APIService from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:40.408620 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:40.438809 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-cainjector-leader-election... E0403 00:11:40.441143 1 leaderelection.go:436] error retrieving resource lock kube-system/cert-manager-cainjector-leader-election: leases.coordination.k8s.io "cert-manager-cainjector-leader-election" is forbidden: User "system:serviceaccount:cert-manager:cert-manager-cainjector" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-system" I0403 00:11:56.415937 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-cainjector-leader-election I0403 00:11:56.415986 1 recorder.go:104] "cert-manager-cainjector-8966b78d4-xlwql_d85fecb4-5a86-4db6-93eb-ea0d943e15c1 became leader" logger="cert-manager.events" type="Normal" object={"kind":"Lease","namespace":"kube-system","name":"cert-manager-cainjector-leader-election","uid":"ad5575e2-ce56-4454-8499-c0c5c6bd45b8","apiVersion":"coordination.k8s.io/v1","resourceVersion":"19357"} reason="LeaderElection" I0403 00:11:56.416223 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.CustomResourceDefinition" I0403 00:11:56.416240 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.MutatingWebhookConfiguration" I0403 00:11:56.416269 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416280 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416289 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.Certificate" I0403 00:11:56.416296 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I0403 00:11:56.416296 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416313 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.APIService" I0403 00:11:56.416324 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416332 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416341 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.Certificate" I0403 00:11:56.416358 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" I0403 00:11:56.416346 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416388 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.Certificate" I0403 00:11:56.416400 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.ValidatingWebhookConfiguration" I0403 00:11:56.416415 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416428 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:11:56.416405 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" I0403 00:11:56.416440 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.Certificate" I0403 00:11:56.416453 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" I0403 00:11:56.493879 1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.503741 1 reflector.go:376] Caches populated for *v1.Certificate from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.589777 1 controller.go:217] "Starting workers" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" worker count=1 I0403 00:11:56.589799 1 controller.go:217] "Starting workers" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 I0403 00:11:56.589847 1 controller.go:217] "Starting workers" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" worker count=1 I0403 00:11:56.589867 1 controller.go:217] "Starting workers" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" worker count=1 I0403 00:11:56.665905 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:11:56.666207 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:11:56.727880 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:11:56.768435 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:11:56.825506 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="clusterissuers.cert-manager.io" I0403 00:11:56.986961 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="certificaterequests.cert-manager.io" I0403 00:11:57.090403 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="orders.acme.cert-manager.io" I0403 00:11:57.194686 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="certificates.cert-manager.io" I0403 00:11:57.638575 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="issuers.cert-manager.io" I0403 00:11:57.857418 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="challenges.acme.cert-manager.io"