I0212 10:47:40.929068       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.3" git_commit="d4faed26ae12115cceb807cdc12507ebc28980e2" go_version="go1.25.6" platform="linux/amd64"
I0212 10:47:40.929179       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0212 10:47:40.929348       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0212 10:47:40.929366       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0212 10:47:40.929369       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0212 10:47:40.929372       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0212 10:47:40.929374       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0212 10:47:40.931263       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0212 10:47:40.931279       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0212 10:47:40.931286       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0212 10:47:40.931729       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0212 10:47:40.931773       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0212 10:47:40.931757       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0212 10:47:40.933409       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0212 10:47:41.019768       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0212 10:47:41.020042       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0212 10:47:41.030827       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0212 10:47:41.119529       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0212 10:47:41.119601       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0212 10:47:41.119619       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0212 10:47:41.120832       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0212 10:47:41.130526       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0212 10:47:41.131870       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0212 10:47:41.133193       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0212 10:47:41.220872       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0212 10:47:41.222223       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0212 10:47:41.222241       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0212 10:47:41.222246       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0212 10:47:41.222252       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0212 10:47:41.222392       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0212 10:47:41.229579       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0212 10:47:41.231136       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0212 10:47:41.319700       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0212 10:47:41.322021       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0212 10:47:41.329372       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0212 10:47:41.330358       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0212 10:47:41.331669       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0212 10:47:41.332856       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0212 10:47:41.334148       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0212 10:47:41.428384       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.428426       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.428389       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.428757       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.429014       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.429219       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.429279       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.429449       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.429605       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.439102       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:41.445191       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0212 10:47:53.923693       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0212 10:47:53.923726       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-02-12 10:47:53.923712875 +0000 UTC m=+13.195258086"
I0212 10:47:53.923789       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-02-12 10:47:53.92377602 +0000 UTC m=+13.195321254"
I0212 10:47:53.935162       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:47:53.935221       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0212 10:47:53.935236       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-02-12 10:47:53.935231068 +0000 UTC m=+13.206776280"
I0212 10:47:54.106621       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-02-12 10:47:54.106603944 +0000 UTC m=+13.378149170"
I0212 10:47:54.350785       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:47:54.431225       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-02-12 10:47:54.43121054 +0000 UTC m=+13.702755757"
I0212 10:47:54.448796       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-02-12 10:47:54.448780008 +0000 UTC m=+13.720325221"
I0212 10:47:54.536522       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:47:54.536507234 +0000 UTC m=+13.808052446"
I0212 10:47:54.553546       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:47:54.553959       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:47:54.553952574 +0000 UTC m=+13.825497786"
I0212 10:47:54.630508       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:47:54.630723       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.519149       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0212 10:48:10.519233       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-02-12 10:48:10.519186047 +0000 UTC m=+29.790731259"
I0212 10:48:10.519310       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.519297731 +0000 UTC m=+29.790842952"
I0212 10:48:10.530441       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.530550       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.530543609 +0000 UTC m=+29.802088839"
I0212 10:48:10.541780       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.559159       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-02-12 10:48:10.55914443 +0000 UTC m=+29.830689665"
I0212 10:48:10.577194       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.577172465 +0000 UTC m=+29.848717685"
I0212 10:48:10.577261       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.577243745 +0000 UTC m=+29.848788957"
I0212 10:48:10.577631       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.577620831 +0000 UTC m=+29.849166052"
I0212 10:48:10.577833       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.577824821 +0000 UTC m=+29.849370041"
I0212 10:48:10.586446       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.592138       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.592170       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0212 10:48:10.641284       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0212 10:48:10.641362       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.641353377 +0000 UTC m=+29.912898589"
E0212 10:48:10.641378       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0212 10:48:10.650539       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0212 10:48:10.650615       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0212 10:48:10.650642       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0212 10:48:10.650661       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0212 10:48:10.762885       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-02-12 10:48:10.762868498 +0000 UTC m=+30.034413730"
I0212 10:48:10.774250       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:48:10.77423434 +0000 UTC m=+30.045779563"
I0212 10:48:10.780439       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.780931       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:48:10.780923203 +0000 UTC m=+30.052468424"
I0212 10:48:10.801960       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:48:10.801943645 +0000 UTC m=+30.073488866"
I0212 10:48:10.802141       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:48:10.802128498 +0000 UTC m=+30.073673718"
I0212 10:48:10.828402       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0212 10:48:10.828669       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-12 10:48:10.828663091 +0000 UTC m=+30.100208312"
I0212 10:48:10.841034       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"