I0709 18:24:10.607132       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0709 18:24:10.607242       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0709 18:24:10.607412       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0709 18:24:10.607427       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0709 18:24:10.607431       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0709 18:24:10.607434       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0709 18:24:10.607437       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0709 18:24:10.609496       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0709 18:24:10.609512       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0709 18:24:10.609518       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0709 18:24:10.609944       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0709 18:24:10.609986       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0709 18:24:10.610059       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0709 18:24:10.611676       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0709 18:24:10.639166       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0709 18:24:10.639458       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0709 18:24:10.730060       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0709 18:24:10.807151       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0709 18:24:10.808937       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0709 18:24:10.810428       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0709 18:24:10.811829       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0709 18:24:10.829890       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0709 18:24:10.831764       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0709 18:24:10.908966       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0709 18:24:10.908987       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0709 18:24:10.908993       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0709 18:24:10.911131       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0709 18:24:11.006040       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0709 18:24:11.006125       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0709 18:24:11.007829       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0709 18:24:11.009639       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0709 18:24:11.010949       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0709 18:24:11.012435       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0709 18:24:11.030165       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0709 18:24:11.106554       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0709 18:24:11.108238       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0709 18:24:11.110011       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0709 18:24:11.131892       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0709 18:24:11.132262       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0709 18:24:11.207057       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207451       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207580       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207699       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207800       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207938       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.207960       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.229569       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.229772       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.229812       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:11.229784       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0709 18:24:20.486324       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-09 18:24:20.48630831 +0000 UTC m=+10.080008072"
I0709 18:24:20.486369       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0709 18:24:20.486475       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-09 18:24:20.486469083 +0000 UTC m=+10.080168835"
I0709 18:24:20.503455       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0709 18:24:20.503538       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0709 18:24:20.503564       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-09 18:24:20.503558292 +0000 UTC m=+10.097258054"
I0709 18:24:20.665547       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-09 18:24:20.665532088 +0000 UTC m=+10.259231840"
I0709 18:24:21.344321       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0709 18:24:21.429424       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-09 18:24:21.429405481 +0000 UTC m=+11.023105263"
I0709 18:24:21.443285       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-09 18:24:21.443274114 +0000 UTC m=+11.036973876"
I0709 18:24:21.511999       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-09 18:24:21.511986766 +0000 UTC m=+11.105686529"
I0709 18:24:21.531451       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0709 18:24:21.531869       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-09 18:24:21.531861702 +0000 UTC m=+11.125561464"
I0709 18:24:21.538174       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0709 18:24:21.543352       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"