I0325 17:36:28.410634       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0325 17:36:28.410732       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0325 17:36:28.410892       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0325 17:36:28.410901       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0325 17:36:28.410904       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0325 17:36:28.410906       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0325 17:36:28.410908       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0325 17:36:28.412564       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0325 17:36:28.412576       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0325 17:36:28.412581       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0325 17:36:28.413029       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0325 17:36:28.413100       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0325 17:36:28.413171       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0325 17:36:28.414425       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0325 17:36:28.423583       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0325 17:36:28.510607       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0325 17:36:28.510843       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0325 17:36:28.511998       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0325 17:36:28.513039       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0325 17:36:28.513193       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0325 17:36:28.514270       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0325 17:36:28.515401       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0325 17:36:28.517497       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0325 17:36:28.609617       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0325 17:36:28.609738       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0325 17:36:28.611187       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0325 17:36:28.612410       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0325 17:36:28.613371       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0325 17:36:28.613384       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0325 17:36:28.613512       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0325 17:36:28.614614       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0325 17:36:28.615755       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0325 17:36:28.616794       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0325 17:36:28.616925       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0325 17:36:28.618195       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0325 17:36:28.714177       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0325 17:36:28.714768       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0325 17:36:28.715592       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0325 17:36:28.716702       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0325 17:36:28.717985       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.718070       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.809791       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.809960       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810169       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810249       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810254       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810302       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810455       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810564       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:28.810588       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0325 17:36:43.141673       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0325 17:36:43.141706       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-03-25 17:36:43.141700856 +0000 UTC m=+14.931809384"
I0325 17:36:43.141741       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-25 17:36:43.141731901 +0000 UTC m=+14.931840448"
I0325 17:36:43.148011       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:43.148043       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0325 17:36:43.148056       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-03-25 17:36:43.14804999 +0000 UTC m=+14.938158532"
I0325 17:36:43.392008       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-03-25 17:36:43.391988889 +0000 UTC m=+15.182097417"
I0325 17:36:43.430356       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-03-25 17:36:43.43034446 +0000 UTC m=+15.220452988"
I0325 17:36:43.511046       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:43.511027136 +0000 UTC m=+15.301135672"
I0325 17:36:43.597241       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:43.597225902 +0000 UTC m=+15.387334445"
I0325 17:36:43.604219       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:43.604659       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:43.60464763 +0000 UTC m=+15.394756170"
I0325 17:36:43.614178       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.526734       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.526716773 +0000 UTC m=+30.316825318"
I0325 17:36:58.526811       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0325 17:36:58.526840       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-03-25 17:36:58.526835196 +0000 UTC m=+30.316943749"
I0325 17:36:58.542013       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.542057       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0325 17:36:58.542071       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-03-25 17:36:58.54206651 +0000 UTC m=+30.332175056"
I0325 17:36:58.565768       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.571496       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-03-25 17:36:58.571482244 +0000 UTC m=+30.361590785"
I0325 17:36:58.582307       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.582291988 +0000 UTC m=+30.372400516"
I0325 17:36:58.582333       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.582320262 +0000 UTC m=+30.372428798"
I0325 17:36:58.582599       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.582591592 +0000 UTC m=+30.372700120"
I0325 17:36:58.582603       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.582594261 +0000 UTC m=+30.372702789"
I0325 17:36:58.582784       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.582780181 +0000 UTC m=+30.372888709"
I0325 17:36:58.590201       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.590266       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.590281       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.593589       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0325 17:36:58.650309       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0325 17:36:58.650363       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.650357974 +0000 UTC m=+30.440466511"
E0325 17:36:58.650382       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0325 17:36:58.658069       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0325 17:36:58.658126       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0325 17:36:58.658140       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0325 17:36:58.658152       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0325 17:36:58.768684       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-03-25 17:36:58.76867142 +0000 UTC m=+30.558779957"
I0325 17:36:58.778370       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:58.77835976 +0000 UTC m=+30.568468340"
I0325 17:36:58.783963       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.786216       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:58.786205333 +0000 UTC m=+30.576313861"
I0325 17:36:58.803634       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:58.803623626 +0000 UTC m=+30.593732174"
I0325 17:36:58.803746       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:58.803737109 +0000 UTC m=+30.593845647"
I0325 17:36:58.812404       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.812660       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-03-25 17:36:58.81265186 +0000 UTC m=+30.602760390"
I0325 17:36:58.822862       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0325 17:36:58.824455       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"