I0707 13:03:24.375504 1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64" I0707 13:03:24.375623 1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] I0707 13:03:24.375845 1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true I0707 13:03:24.375864 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0707 13:03:24.375873 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0707 13:03:24.375877 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0707 13:03:24.375881 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0707 13:03:24.378292 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0707 13:03:24.378315 1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0707 13:03:24.378340 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0707 13:03:24.378881 1 controller.go:182] "starting leader election" logger="cert-manager.controller" I0707 13:03:24.378897 1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0707 13:03:24.378989 1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0707 13:03:24.381936 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... I0707 13:03:24.389933 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0707 13:03:24.475050 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers" I0707 13:03:24.476661 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges" I0707 13:03:24.478372 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0707 13:03:24.573705 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0707 13:03:24.575132 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0707 13:03:24.576294 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0707 13:03:24.576313 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0707 13:03:24.576418 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0707 13:03:24.577813 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0707 13:03:24.579308 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0707 13:03:24.580854 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0707 13:03:24.674478 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0707 13:03:24.674494 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0707 13:03:24.674618 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders" I0707 13:03:24.675987 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0707 13:03:24.676106 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0707 13:03:24.677449 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0707 13:03:24.678774 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0707 13:03:24.680445 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0707 13:03:24.681949 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0707 13:03:24.683425 1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0707 13:03:24.772697 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0707 13:03:24.772706 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0707 13:03:24.776352 1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0707 13:03:24.781731 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.783111 1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.872956 1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.872996 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.873350 1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.873490 1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.873908 1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.874250 1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.874423 1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.874471 1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:24.874731 1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290" I0707 13:03:35.073640 1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 13:03:35.073672 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 13:03:35.073662405 +0000 UTC m=+11.000429400" I0707 13:03:35.073665 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-07 13:03:35.073658584 +0000 UTC m=+11.000425589" I0707 13:03:35.084900 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.084954 1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 13:03:35.084948784 +0000 UTC m=+11.011715779" I0707 13:03:35.116634 1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-07 13:03:35.116625456 +0000 UTC m=+11.043392461" I0707 13:03:35.298262 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.392803 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-07 13:03:35.392789802 +0000 UTC m=+11.319556797" I0707 13:03:35.406767 1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-07 13:03:35.406758704 +0000 UTC m=+11.333525699" I0707 13:03:35.482131 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 13:03:35.482121849 +0000 UTC m=+11.408888844" I0707 13:03:35.492863 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.503791 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.510712 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.573104 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 13:03:35.573085272 +0000 UTC m=+11.499852297" I0707 13:03:35.575817 1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again" I0707 13:03:35.576344 1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-07 13:03:35.576337386 +0000 UTC m=+11.503104391"