I1013 00:26:34.757733       1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64"
I1013 00:26:34.757835       1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I1013 00:26:34.757984       1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I1013 00:26:34.757994       1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true
I1013 00:26:34.757997       1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true
I1013 00:26:34.758000       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1013 00:26:34.758003       1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1013 00:26:34.758008       1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I1013 00:26:34.758012       1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true
I1013 00:26:34.758015       1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true
I1013 00:26:34.758018       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true
I1013 00:26:34.758020       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true
I1013 00:26:34.815086       1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I1013 00:26:34.815122       1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I1013 00:26:34.815130       1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I1013 00:26:34.815137       1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I1013 00:26:34.815503       1 controller.go:193] "starting leader election" logger="cert-manager.controller"
I1013 00:26:34.815500       1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I1013 00:26:34.815562       1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I1013 00:26:34.816830       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1013 00:26:34.823212       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1013 00:26:34.825006       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I1013 00:26:34.913305       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I1013 00:26:34.913321       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I1013 00:26:34.913325       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I1013 00:26:34.913443       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I1013 00:26:34.914712       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I1013 00:26:34.914721       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I1013 00:26:34.914841       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers"
I1013 00:26:34.915849       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I1013 00:26:34.916808       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I1013 00:26:34.916815       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I1013 00:26:34.916924       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I1013 00:26:34.918138       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I1013 00:26:34.957053       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I1013 00:26:35.013573       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I1013 00:26:35.013553       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I1013 00:26:35.014882       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I1013 00:26:35.015903       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I1013 00:26:35.016945       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I1013 00:26:35.018018       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I1013 00:26:35.057861       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I1013 00:26:35.059375       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I1013 00:26:35.113969       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I1013 00:26:35.115368       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders"
I1013 00:26:35.117963       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges"
I1013 00:26:35.159957       1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.160334       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.213591       1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.213729       1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.214132       1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.214747       1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.214769       1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.218038       1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.218626       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.218658       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.258354       1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:26:35.413273       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
I1013 00:27:20.210528       1 leaderelection.go:454] "Failed to update lease optimistically, falling back to slow path" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" err="Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-controller\": dial tcp 10.96.0.1:443: connect: connection refused"
E1013 00:27:20.210899       1 leaderelection.go:461] "Error retrieving lease lock" err="Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cert-manager-controller\": dial tcp 10.96.0.1:443: connect: connection refused" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1013 00:27:29.900463       1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:30.474891       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:30.804659       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:30.808314       1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.212014       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.637490       1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.668315       1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.799616       1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.805911       1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:31.816839       1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1013 00:27:35.860046       1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"