I0708 10:12:08.478043       1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="v1.20.3" git_commit="1e1d16d1744e6d9c80e464e58e8d9ab1caed222b" go_version="go1.26.4" platform="linux/amd64"
I0708 10:12:08.478130       1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0708 10:12:08.478255       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0708 10:12:08.478262       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0708 10:12:08.478264       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0708 10:12:08.478266       1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I0708 10:12:08.478268       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I0708 10:12:08.478270       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true
I0708 10:12:08.479819       1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I0708 10:12:08.479847       1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0708 10:12:08.479854       1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0708 10:12:08.479858       1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0708 10:12:08.480262       1 controller.go:190] "starting leader election" logger="cert-manager.controller"
I0708 10:12:08.480344       1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0708 10:12:08.480412       1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0708 10:12:08.481402       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0708 10:12:08.488393       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0708 10:12:08.574644       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0708 10:12:08.575818       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0708 10:12:08.576899       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0708 10:12:08.577847       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I0708 10:12:08.577970       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders"
I0708 10:12:08.672590       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0708 10:12:08.673887       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0708 10:12:08.674010       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0708 10:12:08.675151       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers"
I0708 10:12:08.676172       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0708 10:12:08.677055       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0708 10:12:08.678112       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0708 10:12:08.679030       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0708 10:12:08.679039       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0708 10:12:08.679044       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0708 10:12:08.679047       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0708 10:12:08.679050       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0708 10:12:08.679161       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0708 10:12:08.773557       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0708 10:12:08.773947       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0708 10:12:08.775082       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0708 10:12:08.776030       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0708 10:12:08.776940       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0708 10:12:08.777870       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges"
I0708 10:12:08.779148       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0708 10:12:08.872424       1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872531       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872569       1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872424       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872720       1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872755       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:08.872855       1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:09.875499       1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:09.875723       1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:09.875802       1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:09.875824       1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0708 10:12:19.203502       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 10:12:19.203479725 +0000 UTC m=+10.831194687"
I0708 10:12:19.203544       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 10:12:19.203568       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-08 10:12:19.203563855 +0000 UTC m=+10.831278806"
I0708 10:12:19.213957       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:12:19.214002       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 10:12:19.213991552 +0000 UTC m=+10.841706497"
I0708 10:12:19.386617       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:12:19.402631       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-08 10:12:19.40261182 +0000 UTC m=+11.030326788"
I0708 10:12:19.476658       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-08 10:12:19.476637643 +0000 UTC m=+11.104352587"
I0708 10:12:19.477297       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 10:12:19.477286164 +0000 UTC m=+11.105001115"
I0708 10:12:19.488904       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 10:12:19.488896447 +0000 UTC m=+11.116611391"
I0708 10:12:19.573585       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 10:12:19.573559356 +0000 UTC m=+11.201274307"
I0708 10:12:19.577488       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:12:19.584271       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 10:12:19.58426354 +0000 UTC m=+11.211978499"
I0708 10:12:19.594752       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:12:19.595247       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 10:12:19.595242754 +0000 UTC m=+11.222957698"
I0708 10:12:19.672551       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 10:12:19.672867       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"