~mYT Starting cert-manager-operator
W1018 11:50:06.295488       1 cmd.go:257] Using insecure, self-signed certificates
I1018 11:50:06.295750       1 crypto.go:594] Generating new CA for cert-manager-operator-signer@1760788206 cert, and key in /tmp/serving-cert-889746339/serving-signer.crt, /tmp/serving-cert-889746339/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1760788206" is unset, resetting to 157680000000000000 years!
I1018 11:50:06.646537       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I1018 11:50:06.647359       1 observer_polling.go:159] Starting file observer
I1018 11:50:06.675616       1 builder.go:304] cert-manager-operator version -
I1018 11:50:06.676745       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-889746339/tls.crt::/tmp/serving-cert-889746339/tls.key"
I1018 11:50:07.020815       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I1018 11:50:07.030529       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I1018 11:50:07.030657       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I1018 11:50:07.030815       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I1018 11:50:07.030866       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I1018 11:50:07.036041       1 secure_serving.go:57] Forcing use of http/1.1 only
W1018 11:50:07.036138       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W1018 11:50:07.036151       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W1018 11:50:07.036158       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W1018 11:50:07.036163       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W1018 11:50:07.036168       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W1018 11:50:07.036172       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I1018 11:50:07.036101       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I1018 11:50:07.044611       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I1018 11:50:07.044722       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I1018 11:50:07.044763       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I1018 11:50:07.044805       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I1018 11:50:07.044818       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I1018 11:50:07.044836       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I1018 11:50:07.044843       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I1018 11:50:07.044677       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-889746339/tls.crt::/tmp/serving-cert-889746339/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1760788206\" (2025-10-18 11:50:05 +0000 UTC to 2025-10-18 11:50:06 +0000 UTC (now=2025-10-18 11:50:07.044645197 +0000 UTC))"
I1018 11:50:07.045377       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1760788206\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1760788206\" (2025-10-18 10:50:06 +0000 UTC to 2026-10-18 10:50:06 +0000 UTC (now=2025-10-18 11:50:07.045350521 +0000 UTC))"
I1018 11:50:07.045447       1 secure_serving.go:213] Serving securely on [::]:8443
I1018 11:50:07.045494       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I1018 11:50:07.044703       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-889746339/tls.crt::/tmp/serving-cert-889746339/tls.key"
I1018 11:50:07.045658       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I1018 11:50:07.049815       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183
I1018 11:50:07.049895       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209
I1018 11:50:07.050889       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209
I1018 11:50:07.070562       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I1018 11:50:07.070946       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"91c4cfc9-adba-4a63-adf1-4f68c038a9c6", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"1705018", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-df9665ff5-gt9gn_fcedb5f7-df23-41db-9025-0d4fadc6620c became leader
I1018 11:50:07.090144       1 setup_manager.go:50] "setting up operator manager" logger="setup-manager" controller="cert-manager-istio-csr-controller"
I1018 11:50:07.090277       1 setup_manager.go:51] "controller" logger="setup-manager" version=""
I1018 11:50:07.090335       1 setup_manager.go:53] [CACHE-TRACKING] NewControllerManager: Creating manager with unified cache (using istiocsr.NewCacheBuilder)
I1018 11:50:07.090384       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I1018 11:50:07.091145       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I1018 11:50:07.091370       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I1018 11:50:07.091896       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I1018 11:50:07.092107       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I1018 11:50:07.093534       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I1018 11:50:07.094663       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I1018 11:50:07.098120       1 reflector.go:376] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.102095       1 reflector.go:376] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.102093       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.104467       1 reflector.go:376] Caches populated for *v1alpha1.CertManager from github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125
I1018 11:50:07.112559       1 reflector.go:376] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.114058       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.114546       1 reflector.go:376] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.115104       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.119684       1 reflector.go:376] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.122715       1 reflector.go:376] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125
I1018 11:50:07.123110       1 reflector.go:376] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.127742       1 reflector.go:376] Caches populated for *v1.ClusterRoleBinding from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.128190       1 reflector.go:376] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.132812       1 controller.go:109] "[CACHE-TRACKING] NewCacheBuilder: Created unified cache for manager" logger="cache-builder" cachePtr="0xc00028cfa0" labelSelector="app=cert-manager-istio-csr"
I1018 11:50:07.133045       1 setup_manager.go:68] [CACHE-TRACKING] NewControllerManager: Manager created with cache (ptr=0xc00028cfa0) and client (ptr=0xc000e23290)
I1018 11:50:07.133058       1 client.go:48] [CACHE-TRACKING] NewClient: Using manager's client (ptr=0xc000e23290) backed by manager's cache (ptr=0xc00028cfa0)
I1018 11:50:07.133067       1 setup_manager.go:76] [CACHE-TRACKING] NewControllerManager: Reconciler created, about to setup watches
I1018 11:50:07.133097       1 controller.go:217] "[CACHE-TRACKING] SetupWithManager: Registering watches" logger="cert-manager-istio-csr-controller" cacheID="0xc00028cfa0" watchTypes=["IstioCSR","Certificate","Deployment","ClusterRole","ClusterRoleBinding","Role","RoleBinding","Service","ServiceAccount","Secret"]
I1018 11:50:07.133198       1 controller.go:236] "[CACHE-TRACKING] SetupWithManager: All watches successfully registered with manager cache" logger="cert-manager-istio-csr-controller" cacheID="0xc00028cfa0" watchesConnectedTo="manager-unified-cache"
I1018 11:50:07.133210       1 setup_manager.go:82] [CACHE-TRACKING] NewControllerManager: Watches setup complete, all using manager cache (ptr=0xc00028cfa0)
I1018 11:50:07.133366       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I1018 11:50:07.133550       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I1018 11:50:07.133679       1 recorder.go:104] "controller is starting" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","apiVersion":"operator.openshift.io/v1alpha1"} reason="ControllerStarted"
I1018 11:50:07.133802       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I1018 11:50:07.133825       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I1018 11:50:07.133836       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I1018 11:50:07.133847       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I1018 11:50:07.133858       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I1018 11:50:07.133870       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I1018 11:50:07.133884       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I1018 11:50:07.133895       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I1018 11:50:07.133905       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I1018 11:50:07.133917       1 controller.go:175] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I1018 11:50:07.133928       1 controller.go:183] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I1018 11:50:07.140163       1 reflector.go:376] Caches populated for *v1.Certificate from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.140490       1 reflector.go:376] Caches populated for *v1.Deployment from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.140809       1 reflector.go:376] Caches populated for *v1.ClusterRoleBinding from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.141809       1 reflector.go:376] Caches populated for *v1.ClusterRole from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.142568       1 reflector.go:376] Caches populated for *v1.ServiceAccount from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.143102       1 reflector.go:376] Caches populated for *v1.RoleBinding from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.143383       1 reflector.go:376] Caches populated for *v1.Service from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.144556       1 reflector.go:376] Caches populated for *v1.Role from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.144586       1 reflector.go:376] Caches populated for *v1alpha1.IstioCSR from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.145050       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I1018 11:50:07.145113       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I1018 11:50:07.147794       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_aggregator-client-signer@1760663899\" [] issuer=\"<self>\" (2025-10-17 01:18:18 +0000 UTC to 2025-11-16 01:18:19 +0000 UTC (now=2025-10-18 11:50:07.147758232 +0000 UTC))"
I1018 11:50:07.148113       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-889746339/tls.crt::/tmp/serving-cert-889746339/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1760788206\" (2025-10-18 11:50:05 +0000 UTC to 2025-10-18 11:50:06 +0000 UTC (now=2025-10-18 11:50:07.148087798 +0000 UTC))"
I1018 11:50:07.148445       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1760788206\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1760788206\" (2025-10-18 10:50:06 +0000 UTC to 2026-10-18 10:50:06 +0000 UTC (now=2025-10-18 11:50:07.148417492 +0000 UTC))"
I1018 11:50:07.145229       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I1018 11:50:07.149015       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2025-10-16 06:05:48 +0000 UTC to 2035-10-14 06:05:48 +0000 UTC (now=2025-10-18 11:50:07.148984695 +0000 UTC))"
I1018 11:50:07.149059       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2025-10-16 06:05:54 +0000 UTC to 2026-10-16 06:05:54 +0000 UTC (now=2025-10-18 11:50:07.149039555 +0000 UTC))"
I1018 11:50:07.149093       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2025-10-16 06:05:54 +0000 UTC to 2026-10-16 06:05:54 +0000 UTC (now=2025-10-18 11:50:07.14907673 +0000 UTC))"
I1018 11:50:07.149127       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"<self>\" (2025-10-16 06:05:49 +0000 UTC to 2035-10-14 06:05:49 +0000 UTC (now=2025-10-18 11:50:07.149107842 +0000 UTC))"
I1018 11:50:07.149158       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1760595901\" [] issuer=\"<self>\" (2025-10-16 06:25:00 +0000 UTC to 2026-10-16 06:25:01 +0000 UTC (now=2025-10-18 11:50:07.14914173 +0000 UTC))"
I1018 11:50:07.149198       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1760663912\" [] issuer=\"openshift-kube-controller-manager-operator_csr-signer-signer@1760663911\" (2025-10-17 01:18:31 +0000 UTC to 2025-11-16 01:18:32 +0000 UTC (now=2025-10-18 11:50:07.149176179 +0000 UTC))"
I1018 11:50:07.149230       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-controller-manager-operator_csr-signer-signer@1760663911\" [] issuer=\"<self>\" (2025-10-17 01:18:30 +0000 UTC to 2025-12-16 01:18:31 +0000 UTC (now=2025-10-18 11:50:07.149213407 +0000 UTC))"
I1018 11:50:07.149261       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_aggregator-client-signer@1760663899\" [] issuer=\"<self>\" (2025-10-17 01:18:18 +0000 UTC to 2025-11-16 01:18:19 +0000 UTC (now=2025-10-18 11:50:07.149245127 +0000 UTC))"
I1018 11:50:07.153606       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-889746339/tls.crt::/tmp/serving-cert-889746339/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1760788206\" (2025-10-18 11:50:05 +0000 UTC to 2025-10-18 11:50:06 +0000 UTC (now=2025-10-18 11:50:07.153572081 +0000 UTC))"
I1018 11:50:07.153853       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1760788206\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1760788206\" (2025-10-18 10:50:06 +0000 UTC to 2026-10-18 10:50:06 +0000 UTC (now=2025-10-18 11:50:07.153830146 +0000 UTC))"
I1018 11:50:07.158019       1 reflector.go:376] Caches populated for *v1.ClusterRole from k8s.io/client-go/informers/factory.go:160
I1018 11:50:07.163175       1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:07.195413       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I1018 11:50:07.195470       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I1018 11:50:07.195617       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I1018 11:50:07.195635       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
I1018 11:50:07.195697       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I1018 11:50:07.195703       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I1018 11:50:07.195717       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I1018 11:50:07.195721       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I1018 11:50:07.195733       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I1018 11:50:07.195737       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
I1018 11:50:07.195749       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I1018 11:50:07.195765       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
I1018 11:50:07.195779       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I1018 11:50:07.195783       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I1018 11:50:07.235522       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.ClusterRoleBinding" objectName="cert-manager-istio-csr-92qcp" objectNamespace="" resourceVersion="446029" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:07.235668       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.ClusterRoleBinding" objectName="cert-manager-istio-csr-92qcp" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:07.239211       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I1018 11:50:07.246946       1 controller.go:217] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I1018 11:50:07.247029       1 controller.go:247] "reconciling" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247040       1 controller.go:248] "[CACHE-TRACKING] Reconcile: Starting reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247049       1 controller.go:252] "[CACHE-TRACKING] Reconcile: About to call r.Get() to fetch IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247102       1 controller.go:258] "istiocsr.openshift.operator.io object not found, skipping reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247110       1 controller.go:259] "[CACHE-TRACKING] Reconcile: IstioCSR NOT FOUND in cache - This indicates the race condition!" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247180       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.ClusterRole" objectName="cert-manager-istio-csr-t6vmz" objectNamespace="" resourceVersion="446026" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:07.247199       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.ClusterRole" objectName="cert-manager-istio-csr-t6vmz" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:07.247219       1 controller.go:247] "reconciling" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247227       1 controller.go:248] "[CACHE-TRACKING] Reconcile: Starting reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247238       1 controller.go:252] "[CACHE-TRACKING] Reconcile: About to call r.Get() to fetch IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247251       1 controller.go:258] "istiocsr.openshift.operator.io object not found, skipping reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.247258       1 controller.go:259] "[CACHE-TRACKING] Reconcile: IstioCSR NOT FOUND in cache - This indicates the race condition!" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:07.271815       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I1018 11:50:07.273737       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I1018 11:50:07.319194       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I1018 11:50:07.321060       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I1018 11:50:07.347828       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I1018 11:50:07.569065       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I1018 11:50:07.646488       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I1018 11:50:08.311747       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I1018 11:50:08.317900       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I1018 11:50:08.623868       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I1018 11:50:10.765343       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I1018 11:50:10.797723       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I1018 11:50:11.553533       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I1018 11:50:12.712468       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I1018 11:50:12.738726       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
E1018 11:50:13.147636       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I1018 11:50:13.496660       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cert-manager-tokenrequest -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I1018 11:50:14.239147       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I1018 11:50:14.403441       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I1018 11:50:16.943500       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I1018 11:50:16.950558       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I1018 11:50:16.954784       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I1018 11:50:16.963701       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I1018 11:50:17.719955       1 request.go:729] Waited for 1.006910314s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster
E1018 11:50:18.340922       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/controller/cert-manager-cert-manager-tokenrequest-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found"
I1018 11:50:18.720618       1 request.go:729] Waited for 1.193312836s due to client-side throttling, not priority and fairness, request: PATCH:https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-deployment-Deployment&force=true
I1018 11:50:23.024809       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"e049eb6a-57bd-4f22-b0d7-425bc894c687", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cert-manager-tokenrequest -n cert-manager because it was missing
I1018 11:50:26.519824       1 request.go:729] Waited for 1.021338858s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster
I1018 11:50:34.499143       1 controller.go:247] "reconciling" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:34.499177       1 controller.go:248] "[CACHE-TRACKING] Reconcile: Starting reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:34.499189       1 controller.go:252] "[CACHE-TRACKING] Reconcile: About to call r.Get() to fetch IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:34.499251       1 controller.go:264] "[CACHE-TRACKING] Reconcile: Successfully fetched IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default" generation=1 resourceVersion="1705662"
I1018 11:50:34.511650       1 controller.go:297] "starting reconciliation of newly created istiocsr" logger="cert-manager-istio-csr-controller" namespace="istio-system" name="default"
I1018 11:50:34.530676       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Service" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705665" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.530819       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Service" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.531395       1 recorder.go:104] "service resource istio-system/cert-manager-istio-csr created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:34.597905       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Service" objectName="cert-manager-istio-csr-metrics" objectNamespace="istio-system" resourceVersion="1705673" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.598021       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Service" objectName="cert-manager-istio-csr-metrics" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.598093       1 recorder.go:104] "service resource istio-system/cert-manager-istio-csr-metrics created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:34.624783       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705676" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.624918       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.627525       1 recorder.go:104] "serviceaccount resource istio-system/cert-manager-istio-csr created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:34.649119       1 recorder.go:104] "/cert-manager-istio-csr-t6vmz clusterrole resource already exists, maybe from previous installation" logger="operator-manager.events" type="Warning" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="ResourceAlreadyExists"
I1018 11:50:34.670764       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705676" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.670803       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.670827       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705680" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.670842       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.ServiceAccount" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.719359       1 recorder.go:104] "/cert-manager-istio-csr-92qcp clusterrolebinding resource already exists, maybe from previous installation" logger="operator-manager.events" type="Warning" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="ResourceAlreadyExists"
I1018 11:50:34.823908       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Role" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705689" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.824052       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Role" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.827468       1 recorder.go:104] "role resource istio-system/cert-manager-istio-csr created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:34.927591       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.RoleBinding" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705691" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:34.927721       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.RoleBinding" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:34.928271       1 recorder.go:104] "rolebinding resource istio-system/cert-manager-istio-csr created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.023364       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Role" objectName="cert-manager-istio-csr-leases" objectNamespace="istio-system" resourceVersion="1705693" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.023401       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Role" objectName="cert-manager-istio-csr-leases" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:35.025970       1 recorder.go:104] "role resource istio-system/cert-manager-istio-csr-leases created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.128304       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.RoleBinding" objectName="cert-manager-istio-csr-leases" objectNamespace="istio-system" resourceVersion="1705696" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.128344       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.RoleBinding" objectName="cert-manager-istio-csr-leases" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:35.128566       1 recorder.go:104] "rolebinding resource istio-system/cert-manager-istio-csr-leases created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.140241       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Certificate" objectName="istiod" objectNamespace="istio-system" resourceVersion="1705698" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.140280       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Certificate" objectName="istiod" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:35.140772       1 recorder.go:104] "certificate resource istio-system/istiod created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.143643       1 reflector.go:376] Caches populated for *v1.Issuer from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:35.339200       1 reflector.go:376] Caches populated for *v1.Secret from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:35.355495       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.PartialObjectMetadata" objectName="istio-ca" objectNamespace="istio-system" resourceVersion="1705633" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.355537       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.PartialObjectMetadata" objectName="istio-ca" objectNamespace="istio-system" resourceVersion="1705710" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.355573       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.PartialObjectMetadata" objectName="istio-ca" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:35.615341       1 reflector.go:376] Caches populated for *v1.ConfigMap from sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:106
I1018 11:50:35.664963       1 recorder.go:104] "configmap resource istio-system/cert-manager-istio-csr-issuer-ca-copy created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.675141       1 controller.go:140] "[CACHE-TRACKING] Watch Event: Object change detected" logger="cert-manager-istio-csr-controller" objectType="*v1.Deployment" objectName="cert-manager-istio-csr" objectNamespace="istio-system" resourceVersion="1705732" cacheID="0xc00028cfa0" eventSource="manager-cache-watch"
I1018 11:50:35.675184       1 controller.go:183] "[CACHE-TRACKING] Watch Event: Enqueuing reconcile request" logger="cert-manager-istio-csr-controller" objectType="*v1.Deployment" objectName="cert-manager-istio-csr" triggerFor="istio-system/default" cacheID="0xc00028cfa0" action="enqueue-reconcile"
I1018 11:50:35.677631       1 recorder.go:104] "deployment resource istio-system/cert-manager-istio-csr created" logger="operator-manager.events" type="Normal" object={"kind":"IstioCSR","namespace":"istio-system","name":"default","uid":"070607bf-1cc8-45a4-a72e-843a287292d1","apiVersion":"operator.openshift.io/v1alpha1","resourceVersion":"1705663"} reason="Reconciled"
I1018 11:50:35.706174       1 controller.go:355] "updating istiocsr conditions on successful reconciliation" logger="cert-manager-istio-csr-controller" namespace="istio-system" name="default" degradedChanged=true readyChanged=true
I1018 11:50:35.722457       1 controller.go:247] "reconciling" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:35.722582       1 controller.go:248] "[CACHE-TRACKING] Reconcile: Starting reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:35.722600       1 controller.go:252] "[CACHE-TRACKING] Reconcile: About to call r.Get() to fetch IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default"
I1018 11:50:35.722645       1 controller.go:264] "[CACHE-TRACKING] Reconcile: Successfully fetched IstioCSR from cache" logger="cert-manager-istio-csr-controller" request="istio-system/default" generation=2 resourceVersion="1705739"