I0707 01:55:26.569910 1 controller.go:75] "starting cert-manager controller" logger="cert-manager.controller" version="v1.20.3" git_commit="1e1d16d1744e6d9c80e464e58e8d9ab1caed222b" go_version="go1.26.4" platform="linux/amd64" I0707 01:55:26.569971 1 controller.go:298] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0707 01:55:26.570104 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0707 01:55:26.570119 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=true I0707 01:55:26.570124 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0707 01:55:26.570127 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0707 01:55:26.570129 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0707 01:55:26.570132 1 envvar.go:172] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0707 01:55:26.571806 1 controller.go:496] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I0707 01:55:26.571833 1 controller.go:95] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0707 01:55:26.571842 1 controller.go:448] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0707 01:55:26.571846 1 controller.go:108] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0707 01:55:26.663771 1 controller.go:190] "starting leader election" logger="cert-manager.controller" I0707 01:55:26.663845 1 controller.go:137] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0707 01:55:26.663896 1 controller.go:183] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0707 01:55:26.664912 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0707 01:55:26.672347 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0707 01:55:26.672490 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0707 01:55:26.675091 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0707 01:55:26.676060 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0707 01:55:26.676182 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0707 01:55:26.677305 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0707 01:55:26.678311 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="issuers" I0707 01:55:26.763854 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="challenges" I0707 01:55:26.767533 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0707 01:55:26.768159 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0707 01:55:26.769152 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0707 01:55:26.770104 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0707 01:55:26.771077 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0707 01:55:26.780940 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0707 01:55:26.864460 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0707 01:55:26.864596 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0707 01:55:26.865911 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0707 01:55:26.868813 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0707 01:55:26.869765 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="orders" I0707 01:55:26.870733 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0707 01:55:26.880469 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0707 01:55:26.880478 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0707 01:55:26.880481 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0707 01:55:26.880483 1 controller.go:237] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I0707 01:55:26.880606 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0707 01:55:26.964281 1 controller.go:254] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0707 01:55:26.965672 1 reflector.go:446] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:26.965796 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:26.965805 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:26.965815 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:26.965870 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:27.971019 1 reflector.go:446] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:27.976331 1 reflector.go:446] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:27.983533 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:27.990274 1 reflector.go:446] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:27.995748 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:28.002760 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.35.2/tools/cache/reflector.go:289" I0707 01:55:38.136027 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.136006713 +0000 UTC m=+11.670479267" I0707 01:55:38.136201 1 trigger_controller.go:227] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 01:55:38.136222 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-07 01:55:38.136218302 +0000 UTC m=+11.670690848" I0707 01:55:38.143439 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.143475 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.143469991 +0000 UTC m=+11.677942549" I0707 01:55:38.270901 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.287711 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-07 01:55:38.287695075 +0000 UTC m=+11.822167621" I0707 01:55:38.297372 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.297362384 +0000 UTC m=+11.831834939" I0707 01:55:38.297474 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.29746077 +0000 UTC m=+11.831933316" I0707 01:55:38.297738 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.297730125 +0000 UTC m=+11.832202671" I0707 01:55:38.297934 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.297927237 +0000 UTC m=+11.832399783" I0707 01:55:38.298329 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.298316101 +0000 UTC m=+11.832788668" I0707 01:55:38.348391 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 01:55:38.348380562 +0000 UTC m=+11.882853123" I0707 01:55:38.380445 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.380480 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.386122 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.386246 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"trust-manager-1\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.387169 1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 01:55:38.387164844 +0000 UTC m=+11.921637390" I0707 01:55:38.480967 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 01:55:38.480960388 +0000 UTC m=+12.015432942" I0707 01:55:38.487631 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.488103 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 01:55:38.488098901 +0000 UTC m=+12.022571456" I0707 01:55:38.493756 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 01:55:38.496420 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"