cert-manager 1.14.3 cainjector leader election seems broken about cert-manager

[wallrj]

Thanks @gaelgatelement

I recreated the problem on a Kind cluster.

v1.13.4

$ kubectl logs -n cert-manager deployments/cert-manager-cainjector
...
I0305 14:11:29.795115       1 start.go:193] "starting" version="v1.13.4" revision="6df6131dcc03789e0240a29cd533223923f3f02c"
I0305 14:11:29.805269       1 setup.go:119] "cert-manager: Registering a reconciler for injectable" kind="mutatingwebhookconfiguration"
I0305 14:11:29.806457       1 setup.go:119] "cert-manager: Registering a reconciler for injectable" kind="validatingwebhookconfiguration"
I0305 14:11:29.806506       1 setup.go:119] "cert-manager: Registering a reconciler for injectable" kind="apiservice"
I0305 14:11:29.807855       1 setup.go:119] "cert-manager: Registering a reconciler for injectable" kind="customresourcedefinition"
I0305 14:11:29.909272       1 leaderelection.go:250] attempting to acquire leader lease kube-system/cert-manager-cainjector-leader-election...
I0305 14:11:29.916817       1 leaderelection.go:260] successfully acquired lease kube-system/cert-manager-cainjector-leader-election
I0305 14:11:29.916999       1 recorder.go:104] "cert-manager/events: cert-manager-cainjector-56fcc9d88c-88g74_abb45bd2-7ae5-4df3-b6d9-5ad60158d2aa became leader" type="Normal" object={"kind":"Lease","namespace":"kube-system","name":"cert-manager-cainjector-leader-election","uid":"f730c52b-0455-488f-9dca-3c9c7285c3c6","apiVersion":"coordination.k8s.io/v1","resourceVersion":"621"} reason="LeaderElection"


$ kubectl get leases.coordination.k8s.io -A
NAMESPACE         NAME                                      HOLDER                                                                          AGE
kube-node-lease   kind-control-plane                        kind-control-plane                                                              45m
kube-system       apiserver-c7uylvfxlbqccnk6myfkwetzze      apiserver-c7uylvfxlbqccnk6myfkwetzze_86fecec4-40ce-4227-8c45-c7f3901dc33e       45m
kube-system       cert-manager-cainjector-leader-election   cert-manager-cainjector-56fcc9d88c-88g74_abb45bd2-7ae5-4df3-b6d9-5ad60158d2aa   45m
kube-system       cert-manager-controller                   cert-manager-65d7f74bf8-6ls64-external-cert-manager-controller                  44m
kube-system       kube-controller-manager                   kind-control-plane_277d9af7-a70f-4ea9-92af-61f8fc374190                         45m
kube-system       kube-scheduler                            kind-control-plane_c072acc4-2a30-441e-be4d-e50b749b253f                         45m

v1.14

$ kubectl logs -n cert-manager deployments/cert-manager-cainjector  | grep -i leader

$ kubectl get leases.coordination.k8s.io -A
NAMESPACE         NAME                                      HOLDER                                                                      AGE
kube-node-lease   kind-control-plane                        kind-control-plane                                                          49m
kube-system       apiserver-c7uylvfxlbqccnk6myfkwetzze      apiserver-c7uylvfxlbqccnk6myfkwetzze_86fecec4-40ce-4227-8c45-c7f3901dc33e   49m
kube-system       cert-manager-cainjector-leader-election                                                                               49m
kube-system       cert-manager-controller                   cert-manager-6d988558d6-22tbw-external-cert-manager-controller              49m
kube-system       kube-controller-manager                   kind-control-plane_277d9af7-a70f-4ea9-92af-61f8fc374190                     49m
kube-system       kube-scheduler                            kind-control-plane_c072acc4-2a30-441e-be4d-e50b749b253f                     49m

The following PRs may be responsible:

• #6467
• #6491

/cc @inteon