I1012 12:38:25.657716 1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64" I1012 12:38:25.657792 1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I1012 12:38:25.657909 1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true I1012 12:38:25.657918 1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1012 12:38:25.657920 1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1012 12:38:25.657922 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1012 12:38:25.657923 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true I1012 12:38:25.657925 1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true I1012 12:38:25.657926 1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true I1012 12:38:25.657927 1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true I1012 12:38:25.657929 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true I1012 12:38:25.657930 1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1012 12:38:25.662450 1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I1012 12:38:25.662489 1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1012 12:38:25.662501 1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1012 12:38:25.662507 1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1012 12:38:25.662793 1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1012 12:38:25.662811 1 controller.go:193] "starting leader election" logger="cert-manager.controller" I1012 12:38:25.662828 1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1012 12:38:25.664037 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1012 12:38:25.676598 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1012 12:38:25.676792 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1012 12:38:25.758504 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1012 12:38:25.758795 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1012 12:38:25.759647 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1012 12:38:25.759773 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1012 12:38:25.761305 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers" I1012 12:38:25.762651 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I1012 12:38:25.762721 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges" I1012 12:38:25.763841 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1012 12:38:25.764873 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1012 12:38:25.857872 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1012 12:38:25.858041 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1012 12:38:25.861263 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1012 12:38:25.862155 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1012 12:38:25.863169 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1012 12:38:25.864037 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders" I1012 12:38:25.864961 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1012 12:38:25.865715 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1012 12:38:25.865723 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1012 12:38:25.865727 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I1012 12:38:25.865867 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1012 12:38:25.957961 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1012 12:38:25.959200 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1012 12:38:25.961639 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1012 12:38:26.058093 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1012 12:38:26.060026 1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.060096 1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.060218 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.060363 1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.060393 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.061000 1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.061154 1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.061490 1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.061844 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.064869 1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.157789 1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 12:38:26.262190 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]" I1012 12:43:42.825557 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" err="etcdserver: request timed out" I1012 13:16:05.017471 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" err="etcdserver: request timed out" E1012 13:16:30.012470 1 leaderelection.go:461] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-controller\": context deadline exceeded" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1012 13:16:30.012508 1 leaderelection.go:304] "Failed to renew lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" err="context deadline exceeded" I1012 13:16:31.020517 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault" I1012 13:16:31.020732 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing" I1012 13:16:31.020757 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger" I1012 13:16:31.020775 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi" I1012 13:16:31.020789 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned" I1012 13:16:31.020803 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers" I1012 13:16:31.020815 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver" I1012 13:16:31.020829 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness" I1012 13:16:31.020843 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges" I1012 13:16:31.020858 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics" I1012 13:16:31.020870 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim" I1012 13:16:31.020882 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager" I1012 13:16:31.020894 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers" I1012 13:16:31.020906 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager" I1012 13:16:31.020917 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager" I1012 13:16:31.020927 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders" I1012 13:16:31.020938 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme" I1012 13:16:31.020951 1 controller.go:120] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca" E1012 13:16:31.021112 1 main.go:41] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"