I1012 12:38:41.842992       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I1012 12:38:41.843092       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I1012 12:38:41.843302       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I1012 12:38:41.843392       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I1012 12:38:41.843407       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I1012 12:38:41.843415       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1012 12:38:41.843422       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1012 12:38:41.846138       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I1012 12:38:41.846158       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I1012 12:38:41.846169       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I1012 12:38:41.846742       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I1012 12:38:41.846820       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I1012 12:38:41.846820       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I1012 12:38:41.849126       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I1012 12:38:41.859986       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I1012 12:38:41.947910       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I1012 12:38:42.042782       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I1012 12:38:42.044051       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I1012 12:38:42.046976       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I1012 12:38:42.050048       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I1012 12:38:42.053047       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I1012 12:38:42.144147       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I1012 12:38:42.144168       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I1012 12:38:42.144178       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I1012 12:38:42.144189       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I1012 12:38:42.144199       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I1012 12:38:42.144358       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I1012 12:38:42.146729       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I1012 12:38:42.146798       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I1012 12:38:42.244462       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I1012 12:38:42.246400       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I1012 12:38:42.248205       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I1012 12:38:42.250208       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I1012 12:38:42.343524       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I1012 12:38:42.346092       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I1012 12:38:42.348856       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I1012 12:38:42.446986       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I1012 12:38:42.448441       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I1012 12:38:42.542793       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I1012 12:38:42.545702       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.545711       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.546083       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.546143       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.546452       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.547319       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.561510       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.569016       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.582133       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.596643       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:42.604112       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I1012 12:38:53.500705       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-12 12:38:53.500688666 +0000 UTC m=+11.941344516"
I1012 12:38:53.500780       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1012 12:38:53.500812       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-10-12 12:38:53.500803737 +0000 UTC m=+11.941459585"
I1012 12:38:53.512361       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:38:53.512415       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-12 12:38:53.512406425 +0000 UTC m=+11.953062274"
I1012 12:38:53.643100       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-10-12 12:38:53.643082724 +0000 UTC m=+12.083738567"
I1012 12:38:53.864382       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:38:53.952986       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-10-12 12:38:53.952971872 +0000 UTC m=+12.393627720"
I1012 12:38:54.042348       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-10-12 12:38:54.042334603 +0000 UTC m=+12.482990442"
I1012 12:38:54.062877       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:38:54.062845724 +0000 UTC m=+12.503501574"
I1012 12:38:54.075199       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:38:54.076030       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:38:54.0760162 +0000 UTC m=+12.516672047"
I1012 12:38:54.142538       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:38:54.160388       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.576457       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.576437355 +0000 UTC m=+27.017093200"
I1012 12:39:08.576457       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1012 12:39:08.576506       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-10-12 12:39:08.576499131 +0000 UTC m=+27.017154979"
I1012 12:39:08.588461       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.588525       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I1012 12:39:08.588551       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-10-12 12:39:08.588543911 +0000 UTC m=+27.029199758"
E1012 12:39:08.613381       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I1012 12:39:08.613454       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.613434334 +0000 UTC m=+27.054090177"
E1012 12:39:08.613480       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1012 12:39:08.624197       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E1012 12:39:08.624606       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1012 12:39:08.624650       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E1012 12:39:08.624677       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I1012 12:39:08.624738       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-10-12 12:39:08.624728277 +0000 UTC m=+27.065384125"
I1012 12:39:08.643581       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.643566343 +0000 UTC m=+27.084222187"
I1012 12:39:08.644678       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.644640122 +0000 UTC m=+27.085295966"
I1012 12:39:08.644965       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.644944786 +0000 UTC m=+27.085600635"
I1012 12:39:08.645744       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.645725034 +0000 UTC m=+27.086380876"
I1012 12:39:08.646437       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.646407477 +0000 UTC m=+27.087063318"
I1012 12:39:08.665156       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.675113       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.678429       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-10-12 12:39:08.678416799 +0000 UTC m=+27.119072647"
I1012 12:39:08.733434       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.733572       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.743494       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:39:08.743484227 +0000 UTC m=+27.184140065"
I1012 12:39:08.852259       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:39:08.852221476 +0000 UTC m=+27.292877317"
I1012 12:39:08.852399       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:39:08.852384588 +0000 UTC m=+27.293040437"
I1012 12:39:08.942499       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.943180       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-10-12 12:39:08.943166535 +0000 UTC m=+27.383822383"
I1012 12:39:08.948174       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I1012 12:39:08.957270       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"