I1012 11:28:37.714986 1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64" I1012 11:28:37.715061 1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I1012 11:28:37.715169 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true I1012 11:28:37.715184 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1012 11:28:37.715187 1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1012 11:28:37.715190 1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true I1012 11:28:37.715195 1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true I1012 11:28:37.715202 1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true I1012 11:28:37.715207 1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true I1012 11:28:37.715212 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true I1012 11:28:37.715214 1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I1012 11:28:37.715217 1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true I1012 11:28:37.750612 1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I1012 11:28:37.750662 1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1012 11:28:37.750677 1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1012 11:28:37.750688 1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1012 11:28:37.751192 1 controller.go:193] "starting leader election" logger="cert-manager.controller" I1012 11:28:37.751180 1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1012 11:28:37.751259 1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1012 11:28:37.752736 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1012 11:28:37.758967 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I1012 11:28:37.849225 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1012 11:28:37.851410 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1012 11:28:37.853349 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1012 11:28:37.915412 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1012 11:28:37.916796 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1012 11:28:37.918049 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1012 11:28:37.918062 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1012 11:28:37.918066 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1012 11:28:38.013856 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1012 11:28:38.014140 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I1012 11:28:38.014408 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges" I1012 11:28:38.015814 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1012 11:28:38.017174 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1012 11:28:38.049271 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1012 11:28:38.050623 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1012 11:28:38.050707 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1012 11:28:38.052044 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers" I1012 11:28:38.053480 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders" I1012 11:28:38.151949 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1012 11:28:38.152578 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1012 11:28:38.153798 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1012 11:28:38.215230 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1012 11:28:38.215261 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1012 11:28:38.250668 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I1012 11:28:38.250716 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1012 11:28:38.253177 1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.253958 1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.254009 1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.314023 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.314478 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.314569 1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.314640 1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.349479 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.349492 1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.350487 1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.449974 1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I1012 11:28:38.553299 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]" E1012 11:28:48.554150 1 controller.go:155] "re-queuing item due to error processing" err="failed to apply secret cert-manager/trust-manager-tls: Patch \"https://10.96.0.1:443/api/v1/namespaces/cert-manager/secrets/trust-manager-tls?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller" I1012 11:28:49.555436 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]" E1012 11:28:53.417328 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{ui-ca-issuer.18ddc4b75301c478 konflux-ui 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:konflux-ui,Name:ui-ca-issuer,UID:f7f7fa02-a252-4f05-89bb-eef81971d8e4,APIVersion:cert-manager.io/v1,ResourceVersion:6193,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-10-12 11:28:38.414009464 +0000 UTC m=+0.899961677,LastTimestamp:2026-10-12 11:28:38.414009464 +0000 UTC m=+0.899961677,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}" E1012 11:28:53.452015 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{konflux-issuer.18ddc4b753080983 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:konflux-issuer,UID:f9ed27cf-a401-4698-95b6-ce8c6cfb4d48,APIVersion:cert-manager.io/v1,ResourceVersion:5797,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-10-12 11:28:38.414420355 +0000 UTC m=+0.900372568,LastTimestamp:2026-10-12 11:28:38.414420355 +0000 UTC m=+0.900372568,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}" E1012 11:28:59.555743 1 controller.go:155] "re-queuing item due to error processing" err="failed to apply secret cert-manager/trust-manager-tls: Patch \"https://10.96.0.1:443/api/v1/namespaces/cert-manager/secrets/trust-manager-tls?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller" I1012 11:29:01.556647 1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]" I1012 12:00:48.195351 1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" err="etcdserver: request timed out"