I0211 22:03:15.591754       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.3" git_commit="d4faed26ae12115cceb807cdc12507ebc28980e2" go_version="go1.25.6" platform="linux/amd64"
I0211 22:03:15.591838       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0211 22:03:15.592017       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0211 22:03:15.592028       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0211 22:03:15.592033       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0211 22:03:15.592037       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0211 22:03:15.592041       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0211 22:03:15.594352       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0211 22:03:15.594367       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0211 22:03:15.594374       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0211 22:03:15.594769       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0211 22:03:15.668817       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0211 22:03:15.668863       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0211 22:03:15.669331       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0211 22:03:15.696435       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0211 22:03:15.698668       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0211 22:03:15.700567       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0211 22:03:15.702401       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0211 22:03:15.791369       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0211 22:03:15.791385       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0211 22:03:15.793868       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0211 22:03:15.794625       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0211 22:03:15.794716       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0211 22:03:15.869648       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0211 22:03:15.891234       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0211 22:03:15.893074       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0211 22:03:15.895021       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0211 22:03:15.896932       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0211 22:03:15.992014       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0211 22:03:15.993823       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0211 22:03:15.995524       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0211 22:03:15.997210       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0211 22:03:16.069952       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0211 22:03:16.070076       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0211 22:03:16.091893       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0211 22:03:16.093821       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0211 22:03:16.095764       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0211 22:03:16.095775       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0211 22:03:16.096038       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0211 22:03:16.097190       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.097292       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.190039       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.194209       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.194933       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.195355       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.195412       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.195765       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.196310       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.196423       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:16.290186       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0211 22:03:27.904227       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-02-11 22:03:27.904199252 +0000 UTC m=+12.535116074"
I0211 22:03:27.904314       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0211 22:03:27.904338       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-02-11 22:03:27.904330753 +0000 UTC m=+12.535247570"
I0211 22:03:27.915889       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:27.915935       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0211 22:03:27.915956       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-02-11 22:03:27.915946969 +0000 UTC m=+12.546863788"
I0211 22:03:28.082760       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-02-11 22:03:28.082742477 +0000 UTC m=+12.713659298"
I0211 22:03:28.768531       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-02-11 22:03:28.76851701 +0000 UTC m=+13.399433830"
I0211 22:03:28.792880       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:28.792866353 +0000 UTC m=+13.423783171"
I0211 22:03:28.810430       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:28.810418564 +0000 UTC m=+13.441335380"
I0211 22:03:28.821479       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:28.890759       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:28.890748769 +0000 UTC m=+13.521665584"
I0211 22:03:28.893634       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:28.901583       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:28.902116       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:28.902658       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:28.902646235 +0000 UTC m=+13.533563052"
I0211 22:03:44.461982       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0211 22:03:44.462028       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-02-11 22:03:44.462020382 +0000 UTC m=+29.092937201"
I0211 22:03:44.462054       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.462037582 +0000 UTC m=+29.092954398"
I0211 22:03:44.473771       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.473825       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0211 22:03:44.473841       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-02-11 22:03:44.473835057 +0000 UTC m=+29.104751873"
I0211 22:03:44.502637       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.509934       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-02-11 22:03:44.509925608 +0000 UTC m=+29.140842424"
I0211 22:03:44.528880       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.528863041 +0000 UTC m=+29.159779845"
I0211 22:03:44.529059       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.529050191 +0000 UTC m=+29.159966994"
I0211 22:03:44.529243       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.529228411 +0000 UTC m=+29.160145214"
I0211 22:03:44.529502       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.529473109 +0000 UTC m=+29.160389933"
I0211 22:03:44.530247       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.530227462 +0000 UTC m=+29.161144279"
I0211 22:03:44.569179       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.569222       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.569274       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.569419       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0211 22:03:44.591049       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0211 22:03:44.591094       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.591086575 +0000 UTC m=+29.222003391"
E0211 22:03:44.591108       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0211 22:03:44.600702       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0211 22:03:44.600750       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0211 22:03:44.600768       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0211 22:03:44.600794       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0211 22:03:44.709611       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-02-11 22:03:44.709601666 +0000 UTC m=+29.340518485"
I0211 22:03:44.720335       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:44.720325688 +0000 UTC m=+29.351242492"
I0211 22:03:44.726054       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.726507       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:44.726500865 +0000 UTC m=+29.357417681"
I0211 22:03:44.748240       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:44.748231326 +0000 UTC m=+29.379148130"
I0211 22:03:44.748590       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:44.748581198 +0000 UTC m=+29.379498015"
I0211 22:03:44.757261       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.757708       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-02-11 22:03:44.757698783 +0000 UTC m=+29.388615591"
I0211 22:03:44.790407       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0211 22:03:44.792564       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"