I0814 12:48:04.923566       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0814 12:48:04.923633       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0814 12:48:04.923758       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0814 12:48:04.923770       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0814 12:48:04.923773       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0814 12:48:04.923778       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0814 12:48:04.923781       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0814 12:48:04.925588       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0814 12:48:04.925602       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0814 12:48:04.925608       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0814 12:48:04.925897       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0814 12:48:04.925946       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0814 12:48:04.925950       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0814 12:48:04.987591       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0814 12:48:04.996076       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0814 12:48:05.002637       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0814 12:48:05.002657       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0814 12:48:05.087285       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0814 12:48:05.087333       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0814 12:48:05.087359       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0814 12:48:05.088834       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0814 12:48:05.090199       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0814 12:48:05.091481       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0814 12:48:05.092888       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0814 12:48:05.124174       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0814 12:48:05.124255       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0814 12:48:05.125649       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0814 12:48:05.191106       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0814 12:48:05.192991       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0814 12:48:05.223406       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0814 12:48:05.224622       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0814 12:48:05.225764       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0814 12:48:05.225858       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0814 12:48:05.288378       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0814 12:48:05.289621       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0814 12:48:05.290752       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0814 12:48:05.290765       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0814 12:48:05.290840       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0814 12:48:05.292242       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0814 12:48:05.293139       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.293249       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.293272       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.293412       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.293464       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.293416       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.308742       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.323370       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.324491       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.333765       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:05.339997       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0814 12:48:10.482991       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-14 12:48:10.482976973 +0000 UTC m=+5.759809779"
I0814 12:48:10.483055       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 12:48:10.483095       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-14 12:48:10.483084529 +0000 UTC m=+5.759917319"
I0814 12:48:10.493605       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:10.493647       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 12:48:10.493666       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-14 12:48:10.493661794 +0000 UTC m=+5.770494581"
I0814 12:48:10.502547       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-14 12:48:10.502535657 +0000 UTC m=+5.779368448"
I0814 12:48:10.707488       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:10.733336       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-08-14 12:48:10.733326207 +0000 UTC m=+6.010159007"
I0814 12:48:10.789316       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-08-14 12:48:10.789307372 +0000 UTC m=+6.066140155"
I0814 12:48:10.887870       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 12:48:10.887859519 +0000 UTC m=+6.164692303"
I0814 12:48:10.897608       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:10.898007       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 12:48:10.898000089 +0000 UTC m=+6.174832881"
I0814 12:48:10.909601       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:10.909680       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:24.141440       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-08-14 12:48:24.141425585 +0000 UTC m=+19.418258385"
I0814 12:48:24.141524       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 12:48:24.141555       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-08-14 12:48:24.141549965 +0000 UTC m=+19.418382752"
E0814 12:48:24.150367       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0814 12:48:24.150408       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-08-14 12:48:24.150403222 +0000 UTC m=+19.427236005"
E0814 12:48:24.150426       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0814 12:48:24.150809       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:24.150844       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0814 12:48:24.150859       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-08-14 12:48:24.150855395 +0000 UTC m=+19.427688186"
E0814 12:48:24.157937       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0814 12:48:24.157972       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0814 12:48:24.157992       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0814 12:48:24.158010       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0814 12:48:24.160674       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-08-14 12:48:24.160667546 +0000 UTC m=+19.437500329"
I0814 12:48:24.174637       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:24.177781       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-08-14 12:48:24.177774393 +0000 UTC m=+19.454607195"
I0814 12:48:24.192080       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-08-14 12:48:24.192072755 +0000 UTC m=+19.468905538"
I0814 12:48:24.204759       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 12:48:24.204752383 +0000 UTC m=+19.481585174"
I0814 12:48:24.204956       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 12:48:24.204950986 +0000 UTC m=+19.481783777"
I0814 12:48:24.223060       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0814 12:48:24.223291       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-14 12:48:24.223282318 +0000 UTC m=+19.500115109"
I0814 12:48:24.232172       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"