name: cert-manager-webhook-5f594df789-7w2m6
generateName: cert-manager-webhook-5f594df789-
namespace: cert-manager
uid: b367176a-8fd3-4392-91a6-99fceb15ee9c
resourceVersion: '27462808'
creationTimestamp: '2024-07-02T00:37:54Z'
labels:
  app: webhook
  app.kubernetes.io/component: webhook
  app.kubernetes.io/instance: cert-manager
  app.kubernetes.io/name: webhook
  app.kubernetes.io/version: v1.15.1
  pod-template-hash: 5f594df789
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: cert-manager-webhook-5f594df789
    uid: a49ced6d-ca6b-4cc8-995d-29e882128595
    controller: true
    blockOwnerDeletion: true

- name: cert-manager-webhook
  image: quay.io/jetstack/cert-manager-webhook:v1.15.1
  args:
    - '--v=2'
    - '--secure-port=10250'
    - '--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)'
    - '--dynamic-serving-ca-secret-name=cert-manager-webhook-ca'
    - '--dynamic-serving-dns-names=cert-manager-webhook'
    - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)'
    - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc'
  ports:
    - name: https
      containerPort: 10250
      protocol: TCP
    - name: healthcheck
      containerPort: 6080
      protocol: TCP
  env:
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
  resources: {}
  volumeMounts:
    - name: kube-api-access-zgd95
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  livenessProbe:
    httpGet:
      path: /livez
      port: 6080
      scheme: HTTP
    initialDelaySeconds: 60
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3
  readinessProbe:
    httpGet:
      path: /healthz
      port: 6080
      scheme: HTTP
    initialDelaySeconds: 5
    timeoutSeconds: 1
    periodSeconds: 5
    successThreshold: 1
    failureThreshold: 3
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      drop:
        - ALL
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false

volumes:
  - name: kube-api-access-zgd95
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
containers:
  - name: cert-manager-webhook
    image: quay.io/jetstack/cert-manager-webhook:v1.15.1
    args:
      - '--v=2'
      - '--secure-port=10250'
      - '--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)'
      - '--dynamic-serving-ca-secret-name=cert-manager-webhook-ca'
      - '--dynamic-serving-dns-names=cert-manager-webhook'
      - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)'
      - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc'
    ports:
      - name: https
        containerPort: 10250
        protocol: TCP
      - name: healthcheck
        containerPort: 6080
        protocol: TCP
    env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
    resources: {}
    volumeMounts:
      - name: kube-api-access-zgd95
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    livenessProbe:
      httpGet:
        path: /livez
        port: 6080
        scheme: HTTP
      initialDelaySeconds: 60
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 3
    readinessProbe:
      httpGet:
        path: /healthz
        port: 6080
        scheme: HTTP
      initialDelaySeconds: 5
      timeoutSeconds: 1
      periodSeconds: 5
      successThreshold: 1
      failureThreshold: 3
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: cert-manager-webhook
serviceAccount: cert-manager-webhook
nodeName: system-0-r5hb1
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priority: 0
enableServiceLinks: false
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-02T00:37:54Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-02T00:38:04Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-02T00:38:04Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-07-02T00:37:54Z'
hostIP: 10.108.0.3
podIP: 10.244.0.46
podIPs:
  - ip: 10.244.0.46
startTime: '2024-07-02T00:37:54Z'
containerStatuses:
  - name: cert-manager-webhook
    state:
      running:
        startedAt: '2024-07-02T00:37:57Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: quay.io/jetstack/cert-manager-webhook:v1.15.1
    imageID: >-
      quay.io/jetstack/cert-manager-webhook@sha256:88901bb0099b9cdade3950d37bfa97fce7fab0e5429d09fa941b8791add84a5f
    containerID: >-
      containerd://0db222cb36798d20c26f8331948f961083c658fa8128a32e047886bfe18e695e
    started: true
qosClass: BestEffort

metadata:
  name: cert-manager-webhook-5f594df789-7w2m6
  generateName: cert-manager-webhook-5f594df789-
  namespace: cert-manager
  uid: b367176a-8fd3-4392-91a6-99fceb15ee9c
  resourceVersion: '27462808'
  creationTimestamp: '2024-07-02T00:37:54Z'
  labels:
    app: webhook
    app.kubernetes.io/component: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/name: webhook
    app.kubernetes.io/version: v1.15.1
    pod-template-hash: 5f594df789
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: cert-manager-webhook-5f594df789
      uid: a49ced6d-ca6b-4cc8-995d-29e882128595
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: kube-api-access-zgd95
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  containers:
    - name: cert-manager-webhook
      image: quay.io/jetstack/cert-manager-webhook:v1.15.1
      args:
        - '--v=2'
        - '--secure-port=10250'
        - '--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)'
        - '--dynamic-serving-ca-secret-name=cert-manager-webhook-ca'
        - '--dynamic-serving-dns-names=cert-manager-webhook'
        - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)'
        - '--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc'
      ports:
        - name: https
          containerPort: 10250
          protocol: TCP
        - name: healthcheck
          containerPort: 6080
          protocol: TCP
      env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
      resources: {}
      volumeMounts:
        - name: kube-api-access-zgd95
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      livenessProbe:
        httpGet:
          path: /livez
          port: 6080
          scheme: HTTP
        initialDelaySeconds: 60
        timeoutSeconds: 1
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 3
      readinessProbe:
        httpGet:
          path: /healthz
          port: 6080
          scheme: HTTP
        initialDelaySeconds: 5
        timeoutSeconds: 1
        periodSeconds: 5
        successThreshold: 1
        failureThreshold: 3
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          drop:
            - ALL
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: cert-manager-webhook
  serviceAccount: cert-manager-webhook
  nodeName: system-0-r5hb1
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priority: 0
  enableServiceLinks: false
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-02T00:37:54Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-02T00:38:04Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-02T00:38:04Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-07-02T00:37:54Z'
  hostIP: 10.108.0.3
  podIP: 10.244.0.46
  podIPs:
    - ip: 10.244.0.46
  startTime: '2024-07-02T00:37:54Z'
  containerStatuses:
    - name: cert-manager-webhook
      state:
        running:
          startedAt: '2024-07-02T00:37:57Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: quay.io/jetstack/cert-manager-webhook:v1.15.1
      imageID: >-
        quay.io/jetstack/cert-manager-webhook@sha256:88901bb0099b9cdade3950d37bfa97fce7fab0e5429d09fa941b8791add84a5f
      containerID: >-
        containerd://0db222cb36798d20c26f8331948f961083c658fa8128a32e047886bfe18e695e
      started: true
  qosClass: BestEffort

W0702 00:37:57.550389       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0702 00:37:57.563855       1 webhook.go:128] "using dynamic certificate generating using CA stored in Secret resource" logger="cert-manager.webhook.webhook" secret_namespace="cert-manager" secret_name="cert-manager-webhook-ca"
I0702 00:37:57.564573       1 server.go:152] "listening for insecure healthz connections" logger="cert-manager.webhook" address=6080
I0702 00:37:57.564689       1 server.go:183] "Registering webhook" logger="cert-manager.controller-runtime.webhook" path="/mutate"
I0702 00:37:57.564742       1 server.go:183] "Registering webhook" logger="cert-manager.controller-runtime.webhook" path="/validate"
I0702 00:37:57.564776       1 server.go:191] "Starting webhook server" logger="cert-manager.controller-runtime.webhook"
I0702 00:37:57.564810       1 server.go:242] "Serving webhook server" logger="cert-manager.controller-runtime.webhook" host="" port=10250
E0702 00:37:57.569761       1 dynamic_source.go:221] "Failed to generate serving certificate, retrying..." err="failed verifying CA keypair: tls: failed to find any PEM data in certificate input" logger="cert-manager" interval="1s"
I0702 00:37:57.581638       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0702 00:37:58.570124       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0702 00:37:58.570295       1 dynamic_source.go:172] "Detected root CA rotation - regenerating serving certificates" logger="cert-manager"
I0702 00:37:58.574697       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0702 03:43:11.857544       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0706 16:37:58.000355       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0706 16:37:58.003319       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0711 08:37:58.000397       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0711 08:37:58.003721       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0716 00:37:58.000698       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0716 00:37:58.004449       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0718 19:21:30.977961       1 log.go:245] http: TLS handshake error from 10.244.0.64:56854: EOF
I0720 16:37:58.003736       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0720 16:37:58.007912       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0725 03:44:56.365129       1 log.go:245] http: TLS handshake error from 10.244.0.64:34550: EOF
I0725 03:45:18.903733       1 log.go:245] http: TLS handshake error from 10.244.0.64:42314: EOF
I0725 03:45:20.133730       1 log.go:245] http: TLS handshake error from 10.244.0.64:42320: EOF
I0725 08:37:58.000477       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0725 08:37:58.005120       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0730 00:37:58.001132       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0730 00:37:58.004637       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0803 16:37:58.005735       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0803 16:37:58.024903       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0808 08:37:58.010408       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0808 08:37:58.027665       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0813 00:37:58.000278       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0813 00:37:58.005728       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0817 16:37:58.009641       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0817 16:37:58.034054       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0818 16:51:50.749917       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
W0819 12:48:45.111208       1 reflector.go:470] k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232: watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding
I0819 12:48:46.105267       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0819 17:03:44.160470       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0822 08:37:58.001766       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0822 08:37:58.010499       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0823 17:06:43.457004       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0823 17:48:10.260231       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0827 00:37:58.000714       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0827 00:37:58.007128       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0831 16:37:58.000986       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0831 16:37:58.004185       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0901 23:54:43.848441       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0905 08:37:58.000929       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0905 08:37:58.004430       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0905 23:57:43.825861       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0910 00:37:58.000963       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0910 00:37:58.005507       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0913 23:24:43.457741       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0914 16:37:58.001040       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0914 16:37:58.004961       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0916 23:27:43.960374       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0919 08:37:58.000392       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0919 08:37:58.004709       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0921 23:54:43.694550       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0923 02:45:39.177280       1 log.go:245] http: TLS handshake error from 10.244.0.248:58432: EOF
I0924 00:37:58.000758       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0924 00:37:58.004060       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0925 23:57:43.765404       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0928 16:37:58.000990       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I0928 16:37:58.004635       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1003 08:37:58.000996       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1003 08:37:58.004665       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1008 00:37:58.000220       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1008 00:37:58.003750       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1009 04:54:44.107829       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I1012 16:37:58.000782       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1012 16:37:58.006482       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1017 08:37:58.000740       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1017 08:37:58.004620       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1018 15:01:10.869740       1 streamwatcher.go:111] Unexpected EOF during watch stream event decoding: unexpected EOF
I1022 00:37:58.000678       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1022 00:37:58.004574       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1026 16:37:58.000790       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1026 16:37:58.005516       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1029 23:13:27.082741       1 log.go:245] http: TLS handshake error from 10.244.0.248:33634: EOF
I1031 08:37:58.000234       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1031 08:37:58.003409       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1105 00:37:58.000249       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1105 00:37:58.006361       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1109 16:37:58.001090       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1109 16:37:58.004575       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1114 08:37:58.000194       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1114 08:37:58.003978       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1119 00:37:58.000766       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1119 00:37:58.003578       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1123 16:37:58.000243       1 dynamic_source.go:176] "cert-manager webhook certificate requires renewal, regenerating" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]
I1123 16:37:58.003913       1 dynamic_source.go:290] "Updated cert-manager TLS certificate" logger="cert-manager" DNSNames=["cert-manager-webhook","cert-manager-webhook.cert-manager","cert-manager-webhook.cert-manager.svc"]