I0826 16:20:44.783881 1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.1" git_commit="24e33194fb39488eff2bbf10c6dc640f407cad44" go_version="go1.26.5" platform="linux/amd64" I0826 16:20:44.783985 1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0826 16:20:44.784120 1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true I0826 16:20:44.784138 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true I0826 16:20:44.784142 1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true I0826 16:20:44.784145 1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true I0826 16:20:44.784148 1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0826 16:20:44.784151 1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true I0826 16:20:44.784154 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true I0826 16:20:44.784157 1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true I0826 16:20:44.784160 1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0826 16:20:44.784163 1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true I0826 16:20:44.800677 1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000 I0826 16:20:44.800723 1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0826 16:20:44.800734 1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0826 16:20:44.800746 1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0826 16:20:44.801217 1 controller.go:193] "starting leader election" logger="cert-manager.controller" I0826 16:20:44.801274 1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0826 16:20:44.801395 1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0826 16:20:44.803061 1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0826 16:20:44.810566 1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller" I0826 16:20:44.900823 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0826 16:20:44.981337 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0826 16:20:44.981360 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0826 16:20:44.981368 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0826 16:20:44.981475 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0826 16:20:44.983829 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0826 16:20:44.997967 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0826 16:20:44.997984 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset" I0826 16:20:44.998112 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0826 16:20:45.000228 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0826 16:20:45.002440 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders" I0826 16:20:45.082513 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0826 16:20:45.082661 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0826 16:20:45.098960 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0826 16:20:45.181235 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0826 16:20:45.183135 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0826 16:20:45.184945 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0826 16:20:45.186675 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0826 16:20:45.199439 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0826 16:20:45.201169 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0826 16:20:45.282176 1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0826 16:20:45.282388 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0826 16:20:45.284415 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers" I0826 16:20:45.383268 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges" I0826 16:20:45.400552 1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0826 16:20:45.402405 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:45.402558 1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:45.402799 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:45.403028 1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:45.403121 1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:45.403189 1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:46.421066 1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:46.428589 1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:46.483552 1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:46.483661 1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:46.483688 1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343" I0826 16:20:55.521189 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-26 16:20:55.521173194 +0000 UTC m=+11.037713726" I0826 16:20:55.521200 1 trigger_controller.go:238] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0826 16:20:55.521417 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-26 16:20:55.52140785 +0000 UTC m=+11.037948412" I0826 16:20:55.533683 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0826 16:20:55.533742 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-26 16:20:55.533735567 +0000 UTC m=+11.050276099" I0826 16:20:55.598110 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-26 16:20:55.598095992 +0000 UTC m=+11.114636534" I0826 16:20:56.120442 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0826 16:20:56.212477 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-08-26 16:20:56.212454526 +0000 UTC m=+11.728995068" I0826 16:20:56.298832 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-08-26 16:20:56.298815756 +0000 UTC m=+11.815356298" I0826 16:20:56.398884 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-26 16:20:56.398869118 +0000 UTC m=+11.915409660" I0826 16:20:56.410938 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0826 16:20:56.411704 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-26 16:20:56.411697268 +0000 UTC m=+11.928237800" I0826 16:20:56.420897 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0826 16:20:56.425346 1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"