I0401 00:03:30.657465       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0401 00:03:30.657571       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0401 00:03:30.657815       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0401 00:03:30.657834       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0401 00:03:30.657842       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0401 00:03:30.657848       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0401 00:03:30.657855       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0401 00:03:30.684563       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0401 00:03:30.684582       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0401 00:03:30.684592       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0401 00:03:30.684991       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0401 00:03:30.685090       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0401 00:03:30.685140       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0401 00:03:30.753621       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0401 00:03:30.762289       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0401 00:03:30.764685       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0401 00:03:30.783648       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0401 00:03:30.853871       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0401 00:03:30.854038       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0401 00:03:30.855582       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0401 00:03:30.856854       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0401 00:03:30.858135       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0401 00:03:30.859626       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0401 00:03:30.859779       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0401 00:03:30.884576       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0401 00:03:30.886066       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0401 00:03:30.983220       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0401 00:03:30.985972       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0401 00:03:31.053782       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0401 00:03:31.054462       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0401 00:03:31.054577       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0401 00:03:31.055881       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0401 00:03:31.057117       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0401 00:03:31.058175       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0401 00:03:31.058187       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0401 00:03:31.058192       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0401 00:03:31.058329       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0401 00:03:31.059579       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0401 00:03:31.083863       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0401 00:03:31.085157       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.085992       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.153545       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.153677       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.153783       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.153964       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.154104       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.153552       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.154278       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.154511       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:31.154709       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0401 00:03:47.948711       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-04-01 00:03:47.948695962 +0000 UTC m=+17.491650979"
I0401 00:03:47.948786       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 00:03:47.948825       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-04-01 00:03:47.948819946 +0000 UTC m=+17.491774974"
I0401 00:03:47.959449       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:03:47.959497       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 00:03:47.959510       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-04-01 00:03:47.959507141 +0000 UTC m=+17.502462168"
I0401 00:03:48.131453       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-04-01 00:03:48.131441617 +0000 UTC m=+17.674396634"
I0401 00:03:49.172406       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:03:49.182490       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-04-01 00:03:49.182477788 +0000 UTC m=+18.725432815"
I0401 00:03:49.254879       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-04-01 00:03:49.254870802 +0000 UTC m=+18.797825830"
I0401 00:03:49.354629       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:03:49.354599622 +0000 UTC m=+18.897554669"
I0401 00:03:49.365111       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:03:49.365506       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:03:49.365499335 +0000 UTC m=+18.908454352"
I0401 00:03:49.380401       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.471957       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.471941927 +0000 UTC m=+35.014896944"
I0401 00:04:05.471978       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 00:04:05.472009       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-04-01 00:04:05.472004049 +0000 UTC m=+35.014959076"
I0401 00:04:05.481520       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.481562       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 00:04:05.481578       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-04-01 00:04:05.481574234 +0000 UTC m=+35.024529261"
I0401 00:04:05.503835       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.509598       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-04-01 00:04:05.509590134 +0000 UTC m=+35.052545160"
I0401 00:04:05.521358       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.521342544 +0000 UTC m=+35.064297571"
I0401 00:04:05.521538       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.521531061 +0000 UTC m=+35.064486078"
I0401 00:04:05.521661       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.521650665 +0000 UTC m=+35.064605692"
I0401 00:04:05.521894       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.521884073 +0000 UTC m=+35.064839100"
I0401 00:04:05.522112       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.52209436 +0000 UTC m=+35.065049388"
I0401 00:04:05.583454       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.583630       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.583644       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.591906       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0401 00:04:05.599021       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0401 00:04:05.599076       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.599066922 +0000 UTC m=+35.142021959"
E0401 00:04:05.599107       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0401 00:04:05.607369       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0401 00:04:05.607426       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0401 00:04:05.607444       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0401 00:04:05.607462       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0401 00:04:05.720429       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-04-01 00:04:05.720421685 +0000 UTC m=+35.263376702"
I0401 00:04:05.730481       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.730473526 +0000 UTC m=+35.273428553"
I0401 00:04:05.735601       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.736067       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.736060582 +0000 UTC m=+35.279015609"
I0401 00:04:05.758186       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.758176145 +0000 UTC m=+35.301131172"
I0401 00:04:05.758463       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.758453895 +0000 UTC m=+35.301408922"
I0401 00:04:05.767550       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.767759       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.76775337 +0000 UTC m=+35.310708387"
I0401 00:04:05.791792       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 00:04:05.791938       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-04-01 00:04:05.791928065 +0000 UTC m=+35.334883092"