I0311 09:52:04.540644 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["172.30.0.10:53"] I0311 09:52:04.541118 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0311 09:52:04.541132 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0311 09:52:04.541137 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0311 09:52:04.541145 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0311 09:52:04.544951 1 controller.go:88] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0311 09:52:04.544970 1 controller.go:437] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0311 09:52:04.544978 1 controller.go:101] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0311 09:52:04.545351 1 controller.go:125] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0311 09:52:04.545392 1 controller.go:176] "starting leader election" logger="cert-manager.controller" I0311 09:52:04.545412 1 controller.go:169] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0311 09:52:04.547246 1 leaderelection.go:257] attempting to acquire leader lease kube-system/cert-manager-controller... E0311 09:52:04.579072 1 leaderelection.go:436] error retrieving resource lock kube-system/cert-manager-controller: leases.coordination.k8s.io "cert-manager-controller" is forbidden: User "system:serviceaccount:cert-manager:cert-manager" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-system" I0311 09:52:30.723517 1 leaderelection.go:271] successfully acquired lease kube-system/cert-manager-controller I0311 09:52:30.723646 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0311 09:52:30.723664 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0311 09:52:30.726275 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0311 09:52:30.729085 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0311 09:52:30.729102 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0311 09:52:30.729120 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0311 09:52:30.731130 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="issuers" I0311 09:52:30.732939 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0311 09:52:30.734587 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0311 09:52:30.737303 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0311 09:52:30.738965 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0311 09:52:30.740579 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0311 09:52:30.742229 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0311 09:52:30.743695 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="gateway-shim" I0311 09:52:30.743711 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="challenges" I0311 09:52:30.745231 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0311 09:52:30.748095 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0311 09:52:30.749622 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0311 09:52:30.751032 1 controller.go:223] "skipping disabled controller" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0311 09:52:30.751129 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0311 09:52:30.752654 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0311 09:52:30.754156 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0311 09:52:30.755639 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="orders" I0311 09:52:30.757923 1 controller.go:240] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0311 09:52:30.770650 1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.771067 1 reflector.go:376] Caches populated for *v1.Certificate from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.771260 1 reflector.go:376] Caches populated for *v1.Challenge from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.779445 1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.779484 1 reflector.go:376] Caches populated for *v1.Secret from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.779535 1 reflector.go:376] Caches populated for *v1.Issuer from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.782419 1 reflector.go:376] Caches populated for *v1.Ingress from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.782532 1 reflector.go:376] Caches populated for *v1.CertificateRequest from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.782727 1 reflector.go:376] Caches populated for *v1.Order from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.797159 1 reflector.go:376] Caches populated for *v1.PartialObjectMetadata from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251 I0311 09:52:30.823887 1 reflector.go:376] Caches populated for *v1.ClusterIssuer from pkg/mod/k8s.io/client-go@v0.32.0/tools/cache/reflector.go:251