I0403 00:11:56.334610 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0403 00:11:56.334663 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0403 00:11:56.334668 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0403 00:11:56.334671 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0403 00:11:56.360275 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="mutatingwebhookconfiguration" I0403 00:11:56.362424 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="validatingwebhookconfiguration" I0403 00:11:56.362472 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="apiservice" I0403 00:11:56.364461 1 setup.go:119] "Registering a reconciler for injectable" logger="cert-manager" kind="customresourcedefinition" I0403 00:11:56.364542 1 server.go:208] "Starting metrics server" logger="cert-manager.controller-runtime.metrics" I0403 00:11:56.365446 1 server.go:247] "Serving metrics server" logger="cert-manager.controller-runtime.metrics" bindAddress="0.0.0.0:9402" secure=false I0403 00:11:56.368850 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.368999 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.372594 1 reflector.go:376] Caches populated for *v1.APIService from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.752358 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:11:56.765039 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-cainjector-leader-election... E0403 00:11:56.768352 1 leaderelection.go:436] error retrieving resource lock kube-system/cert-manager-cainjector-leader-election: leases.coordination.k8s.io "cert-manager-cainjector-leader-election" is forbidden: User "system:serviceaccount:cert-manager:cert-manager-cainjector" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-system" I0403 00:12:27.112892 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-cainjector-leader-election I0403 00:12:27.112951 1 recorder.go:104] "cert-manager-cainjector-5b4bf68748-6f2nc_1e56bc7f-e348-41c5-8676-48de7fbcfd50 became leader" logger="cert-manager.events" type="Normal" object={"kind":"Lease","namespace":"kube-system","name":"cert-manager-cainjector-leader-election","uid":"261d0a23-ccb4-4c5e-b01e-717d3286610a","apiVersion":"coordination.k8s.io/v1","resourceVersion":"20113"} reason="LeaderElection" I0403 00:12:27.113193 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.ValidatingWebhookConfiguration" I0403 00:12:27.113226 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113238 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.CustomResourceDefinition" I0403 00:12:27.113243 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113264 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113293 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" source="kind source: *v1.Certificate" I0403 00:12:27.113316 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.MutatingWebhookConfiguration" I0403 00:12:27.113325 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" I0403 00:12:27.113332 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113336 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113353 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" source="kind source: *v1.Certificate" I0403 00:12:27.113362 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" I0403 00:12:27.113360 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.APIService" I0403 00:12:27.113364 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113378 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" source="kind source: *v1.Certificate" I0403 00:12:27.113392 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" I0403 00:12:27.113378 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113421 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.PartialObjectMetadata" I0403 00:12:27.113433 1 controller.go:175] "Starting EventSource" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" source="kind source: *v1.Certificate" I0403 00:12:27.113444 1 controller.go:183] "Starting Controller" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" I0403 00:12:27.122600 1 reflector.go:376] Caches populated for *v1.Certificate from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:12:27.129687 1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0403 00:12:27.221942 1 controller.go:217] "Starting workers" logger="cert-manager" controller="apiservice" controllerGroup="apiregistration.k8s.io" controllerKind="APIService" worker count=1 I0403 00:12:27.221942 1 controller.go:217] "Starting workers" logger="cert-manager" controller="customresourcedefinition" controllerGroup="apiextensions.k8s.io" controllerKind="CustomResourceDefinition" worker count=1 I0403 00:12:27.221960 1 controller.go:217] "Starting workers" logger="cert-manager" controller="validatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="ValidatingWebhookConfiguration" worker count=1 I0403 00:12:27.221995 1 controller.go:217] "Starting workers" logger="cert-manager" controller="mutatingwebhookconfiguration" controllerGroup="admissionregistration.k8s.io" controllerKind="MutatingWebhookConfiguration" worker count=1 I0403 00:12:27.240150 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:12:27.241309 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:12:27.252597 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="mutatingwebhookconfiguration" kind="mutatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:12:27.257888 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="validatingwebhookconfiguration" kind="validatingwebhookconfiguration" name="cert-manager-webhook" I0403 00:12:27.354197 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="issuers.cert-manager.io" I0403 00:12:27.554729 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="challenges.acme.cert-manager.io" I0403 00:12:27.589980 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="certificaterequests.cert-manager.io" I0403 00:12:27.660730 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="certificates.cert-manager.io" I0403 00:12:27.703406 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="orders.acme.cert-manager.io" I0403 00:12:27.917509 1 reconciler.go:141] "Updated object" logger="cert-manager" kind="customresourcedefinition" kind="customresourcedefinition" name="clusterissuers.cert-manager.io"