I0318 18:22:53.695681       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0318 18:22:53.695735       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0318 18:22:53.695834       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0318 18:22:53.695841       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0318 18:22:53.695843       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0318 18:22:53.695845       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0318 18:22:53.695847       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0318 18:22:53.696971       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0318 18:22:53.697009       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0318 18:22:53.697013       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0318 18:22:53.697244       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0318 18:22:53.697332       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0318 18:22:53.697343       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0318 18:22:53.698138       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0318 18:22:53.705779       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0318 18:22:53.707090       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0318 18:22:53.785033       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0318 18:22:53.792123       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0318 18:22:53.793555       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0318 18:22:53.794431       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0318 18:22:53.795061       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0318 18:22:53.795174       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0318 18:22:53.795948       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0318 18:22:53.796715       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0318 18:22:53.884805       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0318 18:22:53.885186       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0318 18:22:53.892260       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0318 18:22:53.892325       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0318 18:22:53.892410       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0318 18:22:53.893169       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0318 18:22:53.893864       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0318 18:22:53.894494       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0318 18:22:53.894503       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0318 18:22:53.894620       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0318 18:22:53.895295       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0318 18:22:53.896069       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0318 18:22:53.896882       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0318 18:22:53.897728       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0318 18:22:53.898905       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0318 18:22:53.992328       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.992871       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993100       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993161       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993226       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993305       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993347       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993396       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993427       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993476       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:53.993500       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0318 18:22:59.860522       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-18 18:22:59.860507673 +0000 UTC m=+6.266657061"
I0318 18:22:59.860579       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0318 18:22:59.860613       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-03-18 18:22:59.860607444 +0000 UTC m=+6.266756832"
I0318 18:22:59.869700       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:22:59.869730       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0318 18:22:59.869739       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-03-18 18:22:59.869736592 +0000 UTC m=+6.275885980"
I0318 18:23:00.038765       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-18 18:23:00.038750836 +0000 UTC m=+6.444900214"
I0318 18:23:00.213445       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:00.299244       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-03-18 18:23:00.299237244 +0000 UTC m=+6.705386632"
I0318 18:23:00.309707       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:00.309700368 +0000 UTC m=+6.715849746"
I0318 18:23:00.321081       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:00.321069002 +0000 UTC m=+6.727218390"
I0318 18:23:00.329371       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:00.329613       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:00.329609274 +0000 UTC m=+6.735758662"
I0318 18:23:00.336993       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:00.337127       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.353389       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0318 18:23:14.353428       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-03-18 18:23:14.353421949 +0000 UTC m=+20.759571357"
I0318 18:23:14.353476       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.35346876 +0000 UTC m=+20.759618148"
I0318 18:23:14.361858       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.361883       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.361880556 +0000 UTC m=+20.768029944"
I0318 18:23:14.370642       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.381865       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-03-18 18:23:14.381857306 +0000 UTC m=+20.788006694"
I0318 18:23:14.391731       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.39171995 +0000 UTC m=+20.797869338"
I0318 18:23:14.391746       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.39173823 +0000 UTC m=+20.797887618"
I0318 18:23:14.391901       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.391895892 +0000 UTC m=+20.798045280"
I0318 18:23:14.391943       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.391937242 +0000 UTC m=+20.798086630"
I0318 18:23:14.392108       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.392105534 +0000 UTC m=+20.798254922"
I0318 18:23:14.400059       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.400100       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.400146       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.400184       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0318 18:23:14.475322       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0318 18:23:14.475359       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.475354623 +0000 UTC m=+20.881504011"
E0318 18:23:14.475375       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0318 18:23:14.482416       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0318 18:23:14.482463       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0318 18:23:14.482478       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0318 18:23:14.482491       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0318 18:23:14.596694       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-03-18 18:23:14.59668647 +0000 UTC m=+21.002835858"
I0318 18:23:14.604727       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:14.604721652 +0000 UTC m=+21.010871040"
I0318 18:23:14.610000       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.610225       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:14.610222225 +0000 UTC m=+21.016371613"
I0318 18:23:14.622743       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:14.622737239 +0000 UTC m=+21.028886627"
I0318 18:23:14.622750       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:14.6227452 +0000 UTC m=+21.028894588"
I0318 18:23:14.630216       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.630319       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-18 18:23:14.630316037 +0000 UTC m=+21.036465425"
I0318 18:23:14.638621       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0318 18:23:14.638640       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"