I0701 19:08:11.361231       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0701 19:08:11.361346       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0701 19:08:11.361651       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0701 19:08:11.361689       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0701 19:08:11.361696       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0701 19:08:11.361702       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0701 19:08:11.361709       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0701 19:08:11.456590       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0701 19:08:11.456625       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0701 19:08:11.456636       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0701 19:08:11.457101       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0701 19:08:11.457193       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0701 19:08:11.457204       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0701 19:08:11.519802       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0701 19:08:11.565405       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0701 19:08:11.569348       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0701 19:08:11.569380       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0701 19:08:11.569524       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0701 19:08:11.656738       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0701 19:08:11.660082       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0701 19:08:11.663230       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0701 19:08:11.758515       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0701 19:08:11.761329       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0701 19:08:11.819330       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0701 19:08:11.857284       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0701 19:08:11.860328       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0701 19:08:11.860353       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0701 19:08:11.860362       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0701 19:08:11.860513       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0701 19:08:11.956306       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0701 19:08:11.960524       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0701 19:08:12.020649       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0701 19:08:12.057236       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0701 19:08:12.059935       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0701 19:08:12.060060       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0701 19:08:12.119175       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0701 19:08:12.122521       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0701 19:08:12.159676       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0701 19:08:12.163508       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0701 19:08:12.257012       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.258838       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.260173       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.356739       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.356862       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.357375       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.358132       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.358182       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.358355       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.358452       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:12.358772       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0701 19:08:24.187545       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:08:24.187614       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 19:08:24.187603383 +0000 UTC m=+13.131090025"
I0701 19:08:24.187747       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 19:08:24.187734078 +0000 UTC m=+13.131220720"
I0701 19:08:24.202207       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:24.202292       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:08:24.202327       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-01 19:08:24.202308236 +0000 UTC m=+13.145794878"
I0701 19:08:24.856388       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-01 19:08:24.856367375 +0000 UTC m=+13.799854017"
I0701 19:08:25.280681       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:25.368387       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-01 19:08:25.368370108 +0000 UTC m=+14.311856750"
I0701 19:08:25.460005       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:25.459987914 +0000 UTC m=+14.403474566"
I0701 19:08:25.567128       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:25.567109021 +0000 UTC m=+14.510595663"
I0701 19:08:25.580878       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:25.581649       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:25.581637478 +0000 UTC m=+14.525124120"
I0701 19:08:25.656546       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.383795       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:08:47.383861       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.383837154 +0000 UTC m=+36.327323796"
I0701 19:08:47.383863       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-01 19:08:47.383850875 +0000 UTC m=+36.327337517"
I0701 19:08:47.397784       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.397876       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0701 19:08:47.397905       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-01 19:08:47.397897216 +0000 UTC m=+36.341383868"
I0701 19:08:47.431574       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.439053       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-01 19:08:47.439036215 +0000 UTC m=+36.382522857"
I0701 19:08:47.484087       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.4840574 +0000 UTC m=+36.427544042"
I0701 19:08:47.484444       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.484413692 +0000 UTC m=+36.427900344"
I0701 19:08:47.484784       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.484774045 +0000 UTC m=+36.428260687"
I0701 19:08:47.485624       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.485604734 +0000 UTC m=+36.429091376"
I0701 19:08:47.485965       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.485942476 +0000 UTC m=+36.429429118"
I0701 19:08:47.561264       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.561299       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.561534       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:47.561550       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0701 19:08:47.797525       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0701 19:08:47.797609       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-01 19:08:47.797597104 +0000 UTC m=+36.741083756"
E0701 19:08:47.797642       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:08:47.808257       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0701 19:08:47.808429       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:08:47.808534       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0701 19:08:47.808572       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0701 19:08:48.211042       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-01 19:08:48.211023571 +0000 UTC m=+37.154510213"
I0701 19:08:48.225586       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:48.225565499 +0000 UTC m=+37.169052141"
I0701 19:08:48.232698       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:48.233410       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:48.233398473 +0000 UTC m=+37.176885115"
I0701 19:08:48.255273       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:48.255254657 +0000 UTC m=+37.198741299"
I0701 19:08:48.256671       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:48.256657276 +0000 UTC m=+37.200143928"
I0701 19:08:48.319870       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0701 19:08:48.320337       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-01 19:08:48.320324323 +0000 UTC m=+37.263810965"
I0701 19:08:48.334534       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"