I0701 22:08:35.537566       1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="v1.20.3" git_commit="1e1d16d1744e6d9c80e464e58e8d9ab1caed222b" go_version="go1.26.4" platform="linux/amd64"
I0701 22:08:35.537648       1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0701 22:08:35.537804       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true
I0701 22:08:35.537813       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0701 22:08:35.537818       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0701 22:08:35.537820       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0701 22:08:35.537822       1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I0701 22:08:35.537824       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I0701 22:08:35.632657       1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I0701 22:08:35.632695       1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0701 22:08:35.632704       1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0701 22:08:35.632709       1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0701 22:08:35.633121       1 controller.go:190] "starting leader election" logger="cert-manager.controller"
I0701 22:08:35.633178       1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0701 22:08:35.633248       1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0701 22:08:35.634399       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0701 22:08:35.640976       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0701 22:08:35.641184       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0701 22:08:35.643713       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0701 22:08:35.643878       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers"
I0701 22:08:35.644913       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0701 22:08:35.645975       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0701 22:08:35.647077       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0701 22:08:35.732857       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0701 22:08:35.732977       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0701 22:08:35.736247       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0701 22:08:35.736851       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0701 22:08:35.738006       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders"
I0701 22:08:35.738875       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0701 22:08:35.738886       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I0701 22:08:35.738995       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0701 22:08:35.739986       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0701 22:08:35.740936       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0701 22:08:35.832796       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0701 22:08:35.832808       1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0701 22:08:35.832904       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0701 22:08:35.834206       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0701 22:08:35.837221       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges"
I0701 22:08:35.933297       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0701 22:08:35.934289       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0701 22:08:35.935225       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0701 22:08:35.936160       1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0701 22:08:35.940420       1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:35.940425       1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:35.940504       1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:35.940542       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:35.940553       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:35.940581       1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:36.943741       1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:36.947724       1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:36.955350       1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:36.962519       1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:36.969764       1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289"
I0701 22:08:47.003937       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 22:08:47.00391579 +0000 UTC m=+11.659286838"
I0701 22:08:47.004021       1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 22:08:47.004045       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 22:08:47.004040836 +0000 UTC m=+11.659411892"
I0701 22:08:47.009875       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 22:08:47.009908       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 22:08:47.009904827 +0000 UTC m=+11.665275887"
I0701 22:08:47.145013       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 22:08:47.156126       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-01 22:08:47.156109343 +0000 UTC m=+11.811480384"
I0701 22:08:47.232839       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 22:08:47.232831506 +0000 UTC m=+11.888202547"
I0701 22:08:47.233168       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-01 22:08:47.233151151 +0000 UTC m=+11.888522212"
I0701 22:08:47.240120       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-01 22:08:47.240112994 +0000 UTC m=+11.895484035"
I0701 22:08:47.242119       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 22:08:47.243154       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 22:08:47.243150009 +0000 UTC m=+11.898521057"
I0701 22:08:47.337248       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 22:08:47.337240787 +0000 UTC m=+11.992611844"
I0701 22:08:47.343058       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 22:08:47.343591       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 22:08:47.343585134 +0000 UTC m=+11.998956195"
I0701 22:08:47.432678       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 22:08:47.432779       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"