I0707 19:01:52.954493 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="v1.20.3" git_commit="1e1d16d1744e6d9c80e464e58e8d9ab1caed222b" go_version="go1.26.4" platform="linux/amd64" I0707 19:01:52.954562 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0707 19:01:52.954722 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0707 19:01:52.954736 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0707 19:01:52.954740 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0707 19:01:52.954743 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0707 19:01:52.954745 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0707 19:01:52.954749 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0707 19:01:52.956565 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I0707 19:01:52.956593 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0707 19:01:52.956600 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0707 19:01:52.956608 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0707 19:01:52.956974 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I0707 19:01:52.957024 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0707 19:01:52.957077 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0707 19:01:53.049400 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0707 19:01:53.057271 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0707 19:01:53.060837 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0707 19:01:53.062132 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0707 19:01:53.149504 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0707 19:01:53.151103 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0707 19:01:53.151124 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0707 19:01:53.151144 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0707 19:01:53.151153 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0707 19:01:53.152895 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0707 19:01:53.250803 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0707 19:01:53.250913 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0707 19:01:53.252295 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0707 19:01:53.253492 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0707 19:01:53.254699 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I0707 19:01:53.254711 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0707 19:01:53.254717 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0707 19:01:53.254798 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I0707 19:01:53.256052 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0707 19:01:53.256197 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I0707 19:01:53.348423 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0707 19:01:53.349808 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0707 19:01:53.352081 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0707 19:01:53.357098 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0707 19:01:53.447924 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I0707 19:01:53.448923 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0707 19:01:53.450265 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0707 19:01:53.457235 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:53.457421 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:53.457474 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:53.457723 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:53.457790 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:53.457842 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:54.464903 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:54.475413 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:54.485380 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:54.491385 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:01:54.501400 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 19:02:05.713272 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 19:02:05.713308 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-07 19:02:05.713296973 +0000 UTC m=+12.953522358" I0707 19:02:05.713348 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 19:02:05.713338264 +0000 UTC m=+12.953563664" I0707 19:02:05.725538 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 19:02:05.725585 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 19:02:05.725606 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-07 19:02:05.725599989 +0000 UTC m=+12.965825395" I0707 19:02:05.902607 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 19:02:05.902596162 +0000 UTC m=+13.142821559" I0707 19:02:06.304905 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 19:02:06.311247 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-07 19:02:06.311221313 +0000 UTC m=+13.551446716" I0707 19:02:06.390557 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 19:02:06.390546544 +0000 UTC m=+13.630771931" I0707 19:02:06.406481 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 19:02:06.40647174 +0000 UTC m=+13.646697144" I0707 19:02:06.489354 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 19:02:06.490660 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 19:02:06.490651754 +0000 UTC m=+13.730877151" I0707 19:02:06.508449 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 19:02:06.510263 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"