I0701 19:37:15.129196       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0701 19:37:15.129402       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0701 19:37:15.129780       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0701 19:37:15.129804       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0701 19:37:15.129810       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0701 19:37:15.129818       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0701 19:37:15.129823       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0701 19:37:15.134227       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0701 19:37:15.134267       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0701 19:37:15.134279       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0701 19:37:15.134922       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0701 19:37:15.134974       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0701 19:37:15.135037       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0701 19:37:15.227857       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0701 19:37:15.241503       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0701 19:37:15.245673       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0701 19:37:15.329451       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0701 19:37:15.329492       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0701 19:37:15.329503       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0701 19:37:15.329513       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0701 19:37:15.330772       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0701 19:37:15.429062       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0701 19:37:15.431894       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0701 19:37:15.434653       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0701 19:37:15.437593       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0701 19:37:15.527977       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0701 19:37:15.531330       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0701 19:37:15.534339       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0701 19:37:15.631383       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0701 19:37:15.634092       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0701 19:37:15.728160       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0701 19:37:15.730860       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0701 19:37:15.733544       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0701 19:37:15.733576       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0701 19:37:15.733573       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0701 19:37:15.826772       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0701 19:37:15.830198       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0701 19:37:15.833251       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0701 19:37:15.836544       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0701 19:37:15.929031       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:15.930297       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:15.928194       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:15.932587       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:15.933227       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:15.933603       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:16.025328       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:16.026387       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:16.026727       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:16.027101       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:16.027407       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:37:37.310621       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:37:37.310728       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 19:37:37.310678593 +0000 UTC m=+22.563772828"
I0701 19:37:37.310622       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 19:37:37.310608222 +0000 UTC m=+22.563702447"
I0701 19:37:37.326140       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:37.326220       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:37:37.326246       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 19:37:37.326235839 +0000 UTC m=+22.579330074"
I0701 19:37:37.916850       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 19:37:37.916829819 +0000 UTC m=+23.169924054"
I0701 19:37:38.056427       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:38.139854       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-01 19:37:38.139835289 +0000 UTC m=+23.392929514"
I0701 19:37:38.229315       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:38.229296195 +0000 UTC m=+23.482390420"
I0701 19:37:38.326805       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:38.326781129 +0000 UTC m=+23.579875354"
I0701 19:37:38.426914       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:38.427795       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:38.427780578 +0000 UTC m=+23.680874803"
I0701 19:37:38.441557       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:38.447951       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.618349       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:37:58.618418       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-01 19:37:58.618406546 +0000 UTC m=+43.871500791"
I0701 19:37:58.618564       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.618544488 +0000 UTC m=+43.871638733"
I0701 19:37:58.632320       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.632417       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.632406717 +0000 UTC m=+43.885500952"
I0701 19:37:58.652371       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.674740       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-01 19:37:58.674684237 +0000 UTC m=+43.927778462"
I0701 19:37:58.726569       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.726540058 +0000 UTC m=+43.979634283"
I0701 19:37:58.726645       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.726618529 +0000 UTC m=+43.979712754"
I0701 19:37:58.727125       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.727109947 +0000 UTC m=+43.980204192"
I0701 19:37:58.727281       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.727262129 +0000 UTC m=+43.980356354"
I0701 19:37:58.727924       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.727898199 +0000 UTC m=+43.980992424"
I0701 19:37:58.742013       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.742208       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.742325       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:58.742497       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0701 19:37:58.997578       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0701 19:37:58.997661       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-01 19:37:58.99764905 +0000 UTC m=+44.250743275"
E0701 19:37:58.997726       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:37:59.008378       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0701 19:37:59.008478       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:37:59.008513       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:37:59.008543       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0701 19:37:59.376450       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-01 19:37:59.376432057 +0000 UTC m=+44.629526282"
I0701 19:37:59.390557       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:59.39054006 +0000 UTC m=+44.643634285"
I0701 19:37:59.397985       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:59.398792       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:59.39877813 +0000 UTC m=+44.651872365"
I0701 19:37:59.434026       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:59.434007178 +0000 UTC m=+44.687101403"
I0701 19:37:59.434470       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:59.434444585 +0000 UTC m=+44.687538810"
I0701 19:37:59.446437       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:37:59.446832       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:37:59.446817691 +0000 UTC m=+44.699911926"
I0701 19:37:59.467235       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"