I0331 13:20:39.613999       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0331 13:20:39.614186       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0331 13:20:39.614386       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0331 13:20:39.614395       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0331 13:20:39.614399       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0331 13:20:39.614402       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0331 13:20:39.614405       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0331 13:20:39.616410       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0331 13:20:39.616421       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0331 13:20:39.616431       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0331 13:20:39.616836       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0331 13:20:39.616861       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0331 13:20:39.616921       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0331 13:20:39.675698       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0331 13:20:39.683408       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0331 13:20:39.712805       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0331 13:20:39.713939       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0331 13:20:39.713962       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0331 13:20:39.713967       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0331 13:20:39.714059       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0331 13:20:39.715219       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0331 13:20:39.774756       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0331 13:20:39.776250       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0331 13:20:39.812198       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0331 13:20:39.813377       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0331 13:20:39.813388       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0331 13:20:39.813505       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0331 13:20:39.814613       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0331 13:20:39.815756       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0331 13:20:39.875506       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0331 13:20:39.876906       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0331 13:20:39.912639       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0331 13:20:39.918106       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0331 13:20:40.011145       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0331 13:20:40.012216       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0331 13:20:40.013460       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0331 13:20:40.014494       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0331 13:20:40.015526       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0331 13:20:40.015840       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0331 13:20:40.016997       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.017274       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.017374       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.017420       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.017546       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.026488       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.034170       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.039336       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.044559       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.052397       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:40.057764       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0331 13:20:52.773549       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-31 13:20:52.773533168 +0000 UTC m=+13.351197160"
I0331 13:20:52.773633       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 13:20:52.773648       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-03-31 13:20:52.773644609 +0000 UTC m=+13.351308601"
I0331 13:20:52.783926       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:20:52.783955       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-31 13:20:52.783952141 +0000 UTC m=+13.361616133"
I0331 13:20:52.951465       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-31 13:20:52.951448844 +0000 UTC m=+13.529112836"
I0331 13:20:53.288477       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:20:53.321488       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-03-31 13:20:53.321478925 +0000 UTC m=+13.899142927"
I0331 13:20:53.374582       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-03-31 13:20:53.374570365 +0000 UTC m=+13.952234357"
I0331 13:20:53.418815       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:20:53.418803958 +0000 UTC m=+13.996467950"
I0331 13:20:53.428965       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.395090       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 13:21:08.395129       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-03-31 13:21:08.395122404 +0000 UTC m=+28.972786406"
I0331 13:21:08.395222       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.395202045 +0000 UTC m=+28.972866047"
I0331 13:21:08.402319       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.402378       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.402374434 +0000 UTC m=+28.980038426"
I0331 13:21:08.409002       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.422769       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-03-31 13:21:08.422761649 +0000 UTC m=+29.000425651"
I0331 13:21:08.430462       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.43044744 +0000 UTC m=+29.008111432"
I0331 13:21:08.430470       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.43045341 +0000 UTC m=+29.008117402"
I0331 13:21:08.430800       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.430791742 +0000 UTC m=+29.008455744"
I0331 13:21:08.430903       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.430894632 +0000 UTC m=+29.008558634"
I0331 13:21:08.431102       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.431094043 +0000 UTC m=+29.008758045"
I0331 13:21:08.437984       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.438059       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.439731       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.439742       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0331 13:21:08.513527       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0331 13:21:08.513594       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.513586654 +0000 UTC m=+29.091250646"
E0331 13:21:08.513620       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0331 13:21:08.519123       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0331 13:21:08.519187       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0331 13:21:08.519227       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0331 13:21:08.519247       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0331 13:21:08.632230       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-03-31 13:21:08.632212815 +0000 UTC m=+29.209876807"
I0331 13:21:08.639880       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:21:08.639866327 +0000 UTC m=+29.217530329"
I0331 13:21:08.643985       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.644314       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:21:08.644309465 +0000 UTC m=+29.221973457"
I0331 13:21:08.654997       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:21:08.654987799 +0000 UTC m=+29.232651791"
I0331 13:21:08.655187       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:21:08.65518026 +0000 UTC m=+29.232844252"
I0331 13:21:08.661561       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.661703       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-31 13:21:08.661699727 +0000 UTC m=+29.239363719"
I0331 13:21:08.668390       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 13:21:08.668395       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"