I0826 12:41:02.779337       1 controller.go:76] "starting cert-manager controller" logger="cert-manager.controller" version="v1.21.1" git_commit="24e33194fb39488eff2bbf10c6dc640f407cad44" go_version="go1.26.5" platform="linux/amd64"
I0826 12:41:02.779455       1 controller.go:301] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0826 12:41:02.779632       1 envvar.go:195] "Feature gate default state" feature="InOrderInformers" enabled=true
I0826 12:41:02.779654       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCARotation" enabled=true
I0826 12:41:02.779660       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0826 12:41:02.779664       1 envvar.go:195] "Feature gate default state" feature="InOrderInformersBatchProcess" enabled=true
I0826 12:41:02.779668       1 envvar.go:195] "Feature gate default state" feature="WatchListClient" enabled=true
I0826 12:41:02.779672       1 envvar.go:195] "Feature gate default state" feature="AtomicFIFO" enabled=true
I0826 12:41:02.779676       1 envvar.go:195] "Feature gate default state" feature="InformerResourceVersion" enabled=true
I0826 12:41:02.779680       1 envvar.go:195] "Feature gate default state" feature="ClientsAllowTLSCacheGC" enabled=true
I0826 12:41:02.779684       1 envvar.go:195] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0826 12:41:02.779688       1 envvar.go:195] "Feature gate default state" feature="UnlockWhileProcessingFIFO" enabled=true
I0826 12:41:02.786589       1 controller.go:503] "configured PEM size limits" logger="cert-manager.controller" maxCertificateSize=36500 maxPrivateKeySize=13000 maxChainLength=95000 maxBundleSize=330000
I0826 12:41:02.786633       1 controller.go:96] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0826 12:41:02.786649       1 controller.go:455] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0826 12:41:02.786657       1 controller.go:109] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0826 12:41:02.787073       1 controller.go:140] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0826 12:41:02.787132       1 controller.go:193] "starting leader election" logger="cert-manager.controller"
I0826 12:41:02.787173       1 controller.go:186] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0826 12:41:02.878320       1 leaderelection.go:258] "Attempting to acquire leader lease..." logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0826 12:41:02.885612       1 leaderelection.go:272] "Successfully acquired lease" logger="cert-manager.controller" lock="kube-system/cert-manager-controller"
I0826 12:41:02.888956       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0826 12:41:02.978937       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="challenges"
I0826 12:41:02.981482       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0826 12:41:02.983743       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0826 12:41:02.985968       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0826 12:41:03.063910       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0826 12:41:03.079801       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0826 12:41:03.178750       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0826 12:41:03.178770       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0826 12:41:03.178777       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0826 12:41:03.178783       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0826 12:41:03.178790       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0826 12:41:03.178982       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0826 12:41:03.180693       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0826 12:41:03.182250       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0826 12:41:03.183939       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="orders"
I0826 12:41:03.185489       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0826 12:41:03.263820       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0826 12:41:03.279123       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0826 12:41:03.281034       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0826 12:41:03.281187       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="issuers"
I0826 12:41:03.379832       1 controller.go:240] "skipping disabled controller" logger="cert-manager.controller" controller="listenerset"
I0826 12:41:03.379987       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0826 12:41:03.381734       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0826 12:41:03.383217       1 controller.go:257] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0826 12:41:03.462309       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.462872       1 reflector.go:507] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.462952       1 reflector.go:507] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.463014       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.463062       1 reflector.go:507] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.463187       1 reflector.go:507] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.462316       1 reflector.go:507] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.463308       1 reflector.go:507] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:03.463701       1 reflector.go:507] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:04.465812       1 reflector.go:507] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:04.465826       1 reflector.go:507] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.36.2/tools/cache/reflector.go:343"
I0826 12:41:08.987068       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-26 12:41:08.987047374 +0000 UTC m=+6.424585054"
I0826 12:41:08.987222       1 trigger_controller.go:238] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0826 12:41:08.987277       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-26 12:41:08.987271099 +0000 UTC m=+6.424808789"
I0826 12:41:08.998762       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0826 12:41:08.998837       1 trigger_controller.go:238] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0826 12:41:08.998869       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-08-26 12:41:08.998862043 +0000 UTC m=+6.436399733"
I0826 12:41:09.033647       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-08-26 12:41:09.033633105 +0000 UTC m=+6.471170785"
I0826 12:41:09.899269       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0826 12:41:09.911152       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-08-26 12:41:09.911115851 +0000 UTC m=+7.348653531"
I0826 12:41:09.981497       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-08-26 12:41:09.981484243 +0000 UTC m=+7.419021923"
I0826 12:41:10.087696       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-26 12:41:10.087683868 +0000 UTC m=+7.525221548"
I0826 12:41:10.100058       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0826 12:41:10.100817       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-08-26 12:41:10.100809833 +0000 UTC m=+7.538347503"
I0826 12:41:10.109673       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0826 12:41:10.178223       1 controller.go:150] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"