I0708 08:36:02.732778       1 controller.go:74] "starting cert-manager controller" logger="cert-manager.controller" version="v1.19.4" git_commit="83820a03ce3e6b8a1084fa765d77a6b5b98e6943" go_version="go1.25.7" platform="linux/amd64"
I0708 08:36:02.732892       1 controller.go:290] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
I0708 08:36:02.733093       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0708 08:36:02.733111       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0708 08:36:02.733119       1 envvar.go:172] "Feature gate default state" feature="InOrderInformers" enabled=true
I0708 08:36:02.733125       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0708 08:36:02.733132       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0708 08:36:02.735873       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0708 08:36:02.735896       1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0708 08:36:02.735907       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0708 08:36:02.736359       1 controller.go:129] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0708 08:36:02.736386       1 controller.go:182] "starting leader election" logger="cert-manager.controller"
I0708 08:36:02.736433       1 controller.go:175] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0708 08:36:02.738598       1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller...
I0708 08:36:02.749219       1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller
I0708 08:36:02.749409       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim"
I0708 08:36:02.834383       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0708 08:36:02.836431       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0708 08:36:02.838450       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0708 08:36:02.838568       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0708 08:36:02.840470       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="issuers"
I0708 08:36:02.933867       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0708 08:36:03.032025       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0708 08:36:03.032423       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0708 08:36:03.034524       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0708 08:36:03.034542       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0708 08:36:03.034549       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0708 08:36:03.034622       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0708 08:36:03.036795       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0708 08:36:03.038808       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0708 08:36:03.040729       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0708 08:36:03.133083       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0708 08:36:03.135603       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0708 08:36:03.232290       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="orders"
I0708 08:36:03.234515       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="challenges"
I0708 08:36:03.236466       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0708 08:36:03.238249       1 controller.go:229] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0708 08:36:03.238353       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0708 08:36:03.240332       1 controller.go:246] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0708 08:36:03.305411       1 reflector.go:436] "Caches populated" type="*v1.ClusterIssuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.331861       1 reflector.go:436] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.332131       1 reflector.go:436] "Caches populated" type="*v1.Ingress" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.332320       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.332638       1 reflector.go:436] "Caches populated" type="*v1.Issuer" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.332737       1 reflector.go:436] "Caches populated" type="*v1.Order" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.332883       1 reflector.go:436] "Caches populated" type="*v1.CertificateRequest" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.333223       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.333407       1 reflector.go:436] "Caches populated" type="*v1.Challenge" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.333228       1 reflector.go:436] "Caches populated" type="*v1.PartialObjectMetadata" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:03.333965       1 reflector.go:436] "Caches populated" type="*v1.Certificate" reflector="k8s.io/client-go@v0.34.1/tools/cache/reflector.go:290"
I0708 08:36:12.633741       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 08:36:12.633725794 +0000 UTC m=+10.199886756"
I0708 08:36:12.634029       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/trust-manager" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 08:36:12.634055       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Issuing" lastTransitionTime="2026-07-08 08:36:12.634048935 +0000 UTC m=+10.200209896"
I0708 08:36:12.645768       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:12.645849       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 08:36:12.645840545 +0000 UTC m=+10.212001503"
I0708 08:36:13.245743       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="cert-manager/trust-manager" condition="Ready" lastTransitionTime="2026-07-08 08:36:13.245726264 +0000 UTC m=+10.811887224"
I0708 08:36:13.448598       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:13.532609       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Approved" lastTransitionTime="2026-07-08 08:36:13.532591497 +0000 UTC m=+11.098752460"
I0708 08:36:13.549488       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/trust-manager-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:13.549474847 +0000 UTC m=+11.115635806"
I0708 08:36:13.732689       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:13.732674904 +0000 UTC m=+11.298835862"
I0708 08:36:13.745855       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:13.746383       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/trust-manager" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:13.746371543 +0000 UTC m=+11.312532511"
I0708 08:36:13.757168       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:13.832014       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"trust-manager\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.370983       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.370967567 +0000 UTC m=+30.937128536"
I0708 08:36:33.371009       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 08:36:33.371050       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-08 08:36:33.37104391 +0000 UTC m=+30.937204871"
I0708 08:36:33.382668       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.382733       1 trigger_controller.go:225] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/selfsigned-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0708 08:36:33.382766       1 conditions.go:217] "Setting lastTransitionTime for Certificate condition" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Issuing" lastTransitionTime="2026-07-08 08:36:33.382748183 +0000 UTC m=+30.948909145"
I0708 08:36:33.410833       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.416898       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Approved" lastTransitionTime="2026-07-08 08:36:33.416879891 +0000 UTC m=+30.983040860"
I0708 08:36:33.429342       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.429317921 +0000 UTC m=+30.995478872"
I0708 08:36:33.429488       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.429462391 +0000 UTC m=+30.995623337"
I0708 08:36:33.429968       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.429951772 +0000 UTC m=+30.996112721"
I0708 08:36:33.430028       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.430006992 +0000 UTC m=+30.996167957"
I0708 08:36:33.430373       1 conditions.go:285] "Setting lastTransitionTime for CertificateRequest condition" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.430353969 +0000 UTC m=+30.996514931"
I0708 08:36:33.505290       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.514124       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.514171       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:33.514124       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
E0708 08:36:33.779920       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0708 08:36:33.779979       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="ca-issuer" condition="Ready" lastTransitionTime="2026-07-08 08:36:33.779968927 +0000 UTC m=+31.346129886"
E0708 08:36:33.780004       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0708 08:36:33.788951       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
E0708 08:36:33.789062       1 setup.go:50] "error getting signing CA TLS certificate" err="secrets \"root-secret\" not found" logger="cert-manager.controller.setup" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0708 08:36:33.789108       1 sync.go:62] "error setting up issuer" err="secrets \"root-secret\" not found" logger="cert-manager.controller" resource_name="ca-issuer" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0708 08:36:33.789132       1 controller.go:157] "re-queuing item due to error processing" err="secrets \"root-secret\" not found" logger="cert-manager.controller"
I0708 08:36:34.189896       1 conditions.go:102] "Setting lastTransitionTime for Issuer condition" logger="cert-manager" issuer="self-signed-cluster-issuer" condition="Ready" lastTransitionTime="2026-07-08 08:36:34.189876593 +0000 UTC m=+31.756037561"
I0708 08:36:34.200422       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.200406805 +0000 UTC m=+31.766567750"
I0708 08:36:34.205974       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"selfsigned-ca-1\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:34.206528       1 conditions.go:269] "Found status change for CertificateRequest condition; setting lastTransitionTime" logger="cert-manager" certificateRequest="cert-manager/selfsigned-ca-1" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.206503977 +0000 UTC m=+31.772664939"
I0708 08:36:34.222557       1 conditions.go:86] "Found status change for Issuer condition; setting lastTransitionTime" logger="cert-manager" issuer="ca-issuer" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.222542252 +0000 UTC m=+31.788703212"
I0708 08:36:34.223065       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.223055309 +0000 UTC m=+31.789216274"
I0708 08:36:34.232423       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:34.232697       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.232686496 +0000 UTC m=+31.798847454"
I0708 08:36:34.308118       1 controller.go:152] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0708 08:36:34.308407       1 conditions.go:201] "Found status change for Certificate condition; setting lastTransitionTime" logger="cert-manager" certificate="cert-manager/selfsigned-ca" condition="Ready" oldStatus="False" status="True" lastTransitionTime="2026-07-08 08:36:34.308397338 +0000 UTC m=+31.874558296"