I1008 13:53:00.009722       1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.2" git_commit="922a06aa49ee4bb802db268ef72a174af70edd32" go_version="go1.26.8" platform="linux/amd64"
I1008 13:53:00.009811       1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I1008 13:53:00.009922       1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I1008 13:53:00.009929       1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I1008 13:53:00.009931       1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1008 13:53:00.009933       1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true
I1008 13:53:00.009935       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true
I1008 13:53:00.009936       1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true
I1008 13:53:00.009938       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true
I1008 13:53:00.009939       1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true
I1008 13:53:00.009941       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1008 13:53:00.009942       1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true
I1008 13:53:00.014549       1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I1008 13:53:00.014586       1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I1008 13:53:00.014594       1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I1008 13:53:00.014598       1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I1008 13:53:00.014953       1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I1008 13:53:00.015035       1 controller.go:193] "starting leader election" logger="cert-manager.controller"
I1008 13:53:00.015045       1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I1008 13:53:00.016201       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1008 13:53:00.022258       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I1008 13:53:00.108328       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I1008 13:53:00.109626       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I1008 13:53:00.110431       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I1008 13:53:00.110615       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I1008 13:53:00.111599       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I1008 13:53:00.112552       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I1008 13:53:00.208169       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I1008 13:53:00.208187       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I1008 13:53:00.208192       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I1008 13:53:00.208280       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I1008 13:53:00.209704       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I1008 13:53:00.210806       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I1008 13:53:00.211502       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I1008 13:53:00.211617       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I1008 13:53:00.212622       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges"
I1008 13:53:00.213656       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I1008 13:53:00.215430       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I1008 13:53:00.217098       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I1008 13:53:00.218705       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I1008 13:53:00.307870       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I1008 13:53:00.308200       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers"
I1008 13:53:00.309792       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I1008 13:53:00.310936       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I1008 13:53:00.311876       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders"
I1008 13:53:00.312725       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I1008 13:53:00.314830       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315112       1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315355       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315375       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315804       1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315900       1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.315932       1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.316006       1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.316066       1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.316094       1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:00.316140       1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I1008 13:53:05.219908       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-08 13:53:05.21989249 +0000 UTC m=+5.402213481"
I1008 13:53:05.219971       1 trigger_controller.go:238] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1008 13:53:05.219993       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-08 13:53:05.219981141 +0000 UTC m=+5.402302115"
I1008 13:53:05.233140       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1008 13:53:05.233178       1 trigger_controller.go:238] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1008 13:53:05.233190       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-08 13:53:05.233186852 +0000 UTC m=+5.415507826"
I1008 13:53:05.237977       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-08 13:53:05.237968002 +0000 UTC m=+5.420288968"
I1008 13:53:05.728869       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1008 13:53:05.737571       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-08 13:53:05.73755417 +0000 UTC m=+5.919875136"
I1008 13:53:05.809456       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-08 13:53:05.809429058 +0000 UTC m=+5.991750017"
I1008 13:53:05.828526       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 13:53:05.82851198 +0000 UTC m=+6.010832945"
I1008 13:53:05.838333       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1008 13:53:05.907623       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-08 13:53:05.907611521 +0000 UTC m=+6.089932490"
I1008 13:53:05.907649       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1008 13:53:05.907765       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
I1008 13:53:05.915476       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
I1008 13:53:05.917587       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1008 13:53:06.007626       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"
I1008 13:53:06.907997       1 secret_manager.go:98] "applying Secret data" logger="cert-manager.controller" key="cert-manager/trust-manager" resource_name="trust-manager" resource_namespace="cert-manager" resource_kind="Certificate" resource_version="v1" secret="trust-manager-tls" message="Secret has these extra Annotations: [cert-manager.io/allow-direct-injection]"