I0331 10:58:40.107291       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0331 10:58:40.107652       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0331 10:58:40.122745       1 options.go:259] "enabling the sig-network Gateway API certificate-shim and HTTP-01 solver" logger="cert-manager"
I0331 10:58:40.122818       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers gateway-shim ingress-shim issuers orders]" logger="cert-manager.controller"
I0331 10:58:40.122849       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0331 10:58:40.122863       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0331 10:58:40.123313       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0331 10:58:40.123379       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0331 10:58:40.123387       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0331 10:58:40.130204       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0331 10:58:40.139080       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0331 10:58:40.147492       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="gateway-shim"
I0331 10:58:40.152587       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0331 10:58:40.157727       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0331 10:58:40.157907       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0331 10:58:40.162247       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0331 10:58:40.162396       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0331 10:58:40.167508       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0331 10:58:40.175358       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0331 10:58:40.175389       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0331 10:58:40.175485       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0331 10:58:40.180293       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0331 10:58:40.183694       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0331 10:58:40.187435       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0331 10:58:40.193441       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0331 10:58:40.198737       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0331 10:58:40.207090       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0331 10:58:40.213241       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0331 10:58:40.213584       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0331 10:58:40.220888       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0331 10:58:40.225030       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0331 10:58:40.229360       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0331 10:58:40.233382       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0331 10:58:40.238015       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0331 10:58:40.246486       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0331 10:58:40.248526       1 reflector.go:359] Caches populated for *v1.HTTPRoute from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251117       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251151       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251142       1 reflector.go:359] Caches populated for *v1.Gateway from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251544       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251638       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.251677       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.252203       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.267964       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.286162       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.309244       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.334878       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:40.355993       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0331 10:58:57.925338       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 10:58:57.925310303 +0000 UTC m=+17.842867562
I0331 10:58:58.634892       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0331 10:58:58.634964       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 10:58:58.63495477 +0000 UTC m=+18.552512019
I0331 10:58:58.635669       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 10:58:58.635655194 +0000 UTC m=+18.553212423
E0331 10:58:58.647864       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0331 10:58:58.647940       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 10:58:58.647928509 +0000 UTC m=+18.565485768
E0331 10:58:58.648049       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0331 10:58:58.649517       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 10:58:58.649746       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 10:58:58.649595704 +0000 UTC m=+18.567152963
E0331 10:58:58.664186       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0331 10:58:58.664296       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0331 10:58:58.664327       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0331 10:58:58.664363       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0331 10:58:58.669303       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 10:58:58.701357       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-03-31 10:58:58.701333557 +0000 UTC m=+18.618890816
I0331 10:58:58.734034       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-03-31 10:58:58.734017159 +0000 UTC m=+18.651574388
I0331 10:58:58.757036       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 10:58:58.757024414 +0000 UTC m=+18.674581663
I0331 10:58:58.772628       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 10:58:58.801838       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0331 10:59:03.665283       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 10:59:03.665270708 +0000 UTC m=+23.582827937