I0814 13:48:46.198474       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0814 13:48:46.198555       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0814 13:48:46.198726       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0814 13:48:46.198744       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0814 13:48:46.198747       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0814 13:48:46.198750       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0814 13:48:46.198752       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0814 13:48:46.213565       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0814 13:48:46.213580       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0814 13:48:46.213586       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0814 13:48:46.214002       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0814 13:48:46.214026       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0814 13:48:46.214097       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0814 13:48:46.215502       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0814 13:48:46.225749       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0814 13:48:46.228339       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0814 13:48:46.300798       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0814 13:48:46.300814       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0814 13:48:46.300818       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0814 13:48:46.313211       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0814 13:48:46.313456       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0814 13:48:46.315117       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0814 13:48:46.316040       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0814 13:48:46.397571       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0814 13:48:46.399328       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0814 13:48:46.400489       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0814 13:48:46.400758       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0814 13:48:46.402080       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0814 13:48:46.497470       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0814 13:48:46.499156       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0814 13:48:46.500523       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0814 13:48:46.501445       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0814 13:48:46.512748       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0814 13:48:46.513968       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0814 13:48:46.515488       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0814 13:48:46.516866       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0814 13:48:46.612272       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0814 13:48:46.613270       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0814 13:48:46.613336       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0814 13:48:46.697650       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.697856       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698034       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698187       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698313       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698398       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698685       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698826       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.698831       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.706524       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:46.712993       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 13:48:55.217607       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-14 13:48:55.217591308 +0000 UTC m=+9.216720980"
I0814 13:48:55.217784       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 13:48:55.217805       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-14 13:48:55.217800602 +0000 UTC m=+9.216930266"
I0814 13:48:55.229043       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:48:55.229098       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 13:48:55.229118       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-14 13:48:55.229112934 +0000 UTC m=+9.228242592"
I0814 13:48:55.240249       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-14 13:48:55.240216364 +0000 UTC m=+9.239346022"
I0814 13:48:55.745829       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-08-14 13:48:55.745815447 +0000 UTC m=+9.744945110"
I0814 13:48:55.814348       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-08-14 13:48:55.814333506 +0000 UTC m=+9.813463155"
I0814 13:48:55.836085       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 13:48:55.836070996 +0000 UTC m=+9.835200644"
I0814 13:48:55.847662       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:48:55.918161       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:48:55.923922       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:49:08.843029       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-08-14 13:49:08.843007046 +0000 UTC m=+22.842136705"
I0814 13:49:08.843111       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 13:49:08.843155       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-08-14 13:49:08.843145967 +0000 UTC m=+22.842275627"
E0814 13:49:08.854219       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0814 13:49:08.854299       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-08-14 13:49:08.854290297 +0000 UTC m=+22.853419958"
E0814 13:49:08.854320       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0814 13:49:08.854443       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:49:08.854489       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 13:49:08.854504       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-08-14 13:49:08.854499101 +0000 UTC m=+22.853628759"
E0814 13:49:08.864067       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0814 13:49:08.864312       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0814 13:49:08.864346       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0814 13:49:08.864386       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0814 13:49:08.864463       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-08-14 13:49:08.864456891 +0000 UTC m=+22.863586540"
I0814 13:49:08.897376       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-08-14 13:49:08.897362371 +0000 UTC m=+22.896492029"
I0814 13:49:08.913136       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-08-14 13:49:08.913121785 +0000 UTC m=+22.912251435"
I0814 13:49:08.930772       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 13:49:08.93075694 +0000 UTC m=+22.929886605"
I0814 13:49:08.931183       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 13:49:08.931168345 +0000 UTC m=+22.930297992"
I0814 13:49:08.940488       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:49:08.940671       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 13:49:08.940665718 +0000 UTC m=+22.939795366"
I0814 13:49:08.952505       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 13:49:09.015624       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"