I1008 02:51:42.233173       1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64"
I1008 02:51:42.233266       1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I1008 02:51:42.233403       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true
I1008 02:51:42.233415       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true
I1008 02:51:42.233420       1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true
I1008 02:51:42.233423       1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true
I1008 02:51:42.233426       1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true
I1008 02:51:42.233429       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1008 02:51:42.233432       1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I1008 02:51:42.233435       1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true
I1008 02:51:42.233440       1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1008 02:51:42.233443       1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I1008 02:51:42.237866       1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I1008 02:51:42.237897       1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I1008 02:51:42.237907       1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I1008 02:51:42.237911       1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I1008 02:51:42.238216       1 controller.go:193] "starting leader election" logger="cert-manager.controller"
I1008 02:51:42.238210       1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I1008 02:51:42.238274       1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I1008 02:51:42.239378       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1008 02:51:42.373181       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1008 02:51:42.377066       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I1008 02:51:42.378085       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I1008 02:51:42.378095       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I1008 02:51:42.378099       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I1008 02:51:42.378103       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I1008 02:51:42.378164       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I1008 02:51:42.430421       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I1008 02:51:42.430480       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I1008 02:51:42.430519       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I1008 02:51:42.449027       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I1008 02:51:42.450244       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I1008 02:51:42.451221       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I1008 02:51:42.451231       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I1008 02:51:42.451341       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I1008 02:51:42.530686       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I1008 02:51:42.546308       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I1008 02:51:42.547759       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I1008 02:51:42.548966       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I1008 02:51:42.551456       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I1008 02:51:42.631484       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I1008 02:51:42.646458       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers"
I1008 02:51:42.647881       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges"
I1008 02:51:42.649132       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I1008 02:51:42.649997       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders"
I1008 02:51:42.651166       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I1008 02:51:43.008191       1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.008406       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.008567       1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.008610       1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.008809       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.009428       1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.010052       1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.010145       1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.011636       1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.011750       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.030735       1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 02:51:43.048432       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
E1008 02:51:53.049250       1 controller.go:155] "re-queuing item due to error processing" err="failed to apply secret cert-manager/trust-manager-tls: Patch \"https://10.96.0.1:443/api/v1/namespaces/cert-manager/secrets/trust-manager-tls?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller"
I1008 02:51:54.049890       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
E1008 02:51:58.034951       1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{konflux-issuer.18dc6e2fb8e43f36  default    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:konflux-issuer,UID:c0b4a608-e136-4af1-ac85-bbeda2e60566,APIVersion:cert-manager.io/v1,ResourceVersion:6283,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-10-08 02:51:43.03109919 +0000 UTC m=+0.989542312,LastTimestamp:2026-10-08 02:51:43.03109919 +0000 UTC m=+0.989542312,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}"
E1008 02:51:58.051044       1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{ui-ca-issuer.18dc6e2fb9d6eb89  konflux-ui    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:konflux-ui,Name:ui-ca-issuer,UID:74460f4a-b138-4078-9825-5e983a1abc89,APIVersion:cert-manager.io/v1,ResourceVersion:6874,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-10-08 02:51:43.047003017 +0000 UTC m=+1.005446131,LastTimestamp:2026-10-08 02:51:43.047003017 +0000 UTC m=+1.005446131,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}"
E1008 02:52:04.050163       1 controller.go:155] "re-queuing item due to error processing" err="failed to apply secret cert-manager/trust-manager-tls: Patch \"https://10.96.0.1:443/api/v1/namespaces/cert-manager/secrets/trust-manager-tls?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller"
I1008 02:52:06.050808       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"