I0712 01:41:27.150190 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="v1.20.3" git_commit="1e1d16d1744e6d9c80e464e58e8d9ab1caed222b" go_version="go1.26.4" platform="linux/amd64" I0712 01:41:27.150286 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0712 01:41:27.150423 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0712 01:41:27.150432 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0712 01:41:27.150435 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0712 01:41:27.150437 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0712 01:41:27.150439 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0712 01:41:27.150441 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0712 01:41:27.152211 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I0712 01:41:27.152238 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0712 01:41:27.152245 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0712 01:41:27.152250 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0712 01:41:27.152646 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0712 01:41:27.152669 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I0712 01:41:27.152718 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0712 01:41:27.153950 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0712 01:41:27.162359 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0712 01:41:27.228645 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0712 01:41:27.251134 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0712 01:41:27.252199 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0712 01:41:27.252290 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0712 01:41:27.253360 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0712 01:41:27.254288 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0712 01:41:27.254377 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0712 01:41:27.255485 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0712 01:41:27.351116 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I0712 01:41:27.351754 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0712 01:41:27.353054 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0712 01:41:27.353942 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0712 01:41:27.353951 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0712 01:41:27.353956 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0712 01:41:27.354052 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0712 01:41:27.354912 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I0712 01:41:27.354982 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I0712 01:41:27.355979 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0712 01:41:27.356968 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0712 01:41:27.427834 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I0712 01:41:27.451613 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0712 01:41:27.452180 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0712 01:41:27.454249 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0712 01:41:27.527988 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0712 01:41:27.551265 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0712 01:41:27.556103 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:27.556103 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:27.556155 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:27.556167 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:27.556239 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.560864 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.567788 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.581436 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.586867 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.595159 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:28.599725 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0712 01:41:37.945198 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-12 01:41:37.945173434 +0000 UTC m=+10.986438007" I0712 01:41:37.945310 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0712 01:41:37.945337 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-12 01:41:37.945331862 +0000 UTC m=+10.986596430" I0712 01:41:37.961268 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:37.961309 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-12 01:41:37.961304682 +0000 UTC m=+11.002569248" I0712 01:41:38.037000 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.057246 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-12 01:41:38.057225349 +0000 UTC m=+11.098489908" I0712 01:41:38.070642 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.070624115 +0000 UTC m=+11.111888679" I0712 01:41:38.070876 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.070867141 +0000 UTC m=+11.112131712" I0712 01:41:38.071086 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.071075594 +0000 UTC m=+11.112340165" I0712 01:41:38.071300 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.07128722 +0000 UTC m=+11.112551786" I0712 01:41:38.071407 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.071398236 +0000 UTC m=+11.112662819" I0712 01:41:38.126948 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.127002 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.127040 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.127271 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.144269 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-12 01:41:38.144255471 +0000 UTC m=+11.185520037" I0712 01:41:38.154466 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-12 01:41:38.154455744 +0000 UTC m=+11.195720313" I0712 01:41:38.159212 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.160279 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-12 01:41:38.160274156 +0000 UTC m=+11.201538716" I0712 01:41:38.181123 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-12 01:41:38.181114189 +0000 UTC m=+11.222378763" I0712 01:41:38.226884 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.231294 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0712 01:41:38.258166 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"