name: cert-manager-5798486f6b-qppb7
generateName: cert-manager-5798486f6b-
namespace: cert-manager
uid: b0a0fda3-26b6-4c05-9a27-c8939dd5dba5
resourceVersion: '92139839'
creationTimestamp: '2025-04-17T22:04:40Z'
labels:
  app: cert-manager
  app.kubernetes.io/component: controller
  app.kubernetes.io/instance: cert-manager
  app.kubernetes.io/name: cert-manager
  app.kubernetes.io/version: v1.15.1
  pod-template-hash: 5798486f6b
annotations:
  prometheus.io/path: /metrics
  prometheus.io/port: '9402'
  prometheus.io/scrape: 'true'
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: cert-manager-5798486f6b
    uid: ac414207-ae28-4eaf-bccb-4db76518ddde
    controller: true
    blockOwnerDeletion: true

- name: cert-manager-controller
  image: quay.io/jetstack/cert-manager-controller:v1.15.1
  args:
    - '--v=2'
    - '--cluster-resource-namespace=$(POD_NAMESPACE)'
    - '--leader-election-namespace=kube-system'
    - >-
      --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.1
    - '--max-concurrent-challenges=60'
  ports:
    - name: http-metrics
      containerPort: 9402
      protocol: TCP
    - name: http-healthz
      containerPort: 9403
      protocol: TCP
  env:
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
  resources: {}
  volumeMounts:
    - name: kube-api-access-rgrzn
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  livenessProbe:
    httpGet:
      path: /livez
      port: http-healthz
      scheme: HTTP
    initialDelaySeconds: 10
    timeoutSeconds: 15
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 8
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent
  securityContext:
    capabilities:
      drop:
        - ALL
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false

volumes:
  - name: kube-api-access-rgrzn
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
containers:
  - name: cert-manager-controller
    image: quay.io/jetstack/cert-manager-controller:v1.15.1
    args:
      - '--v=2'
      - '--cluster-resource-namespace=$(POD_NAMESPACE)'
      - '--leader-election-namespace=kube-system'
      - >-
        --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.1
      - '--max-concurrent-challenges=60'
    ports:
      - name: http-metrics
        containerPort: 9402
        protocol: TCP
      - name: http-healthz
        containerPort: 9403
        protocol: TCP
    env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
    resources: {}
    volumeMounts:
      - name: kube-api-access-rgrzn
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    livenessProbe:
      httpGet:
        path: /livez
        port: http-healthz
        scheme: HTTP
      initialDelaySeconds: 10
      timeoutSeconds: 15
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 8
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: IfNotPresent
    securityContext:
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
nodeSelector:
  kubernetes.io/os: linux
serviceAccountName: cert-manager
serviceAccount: cert-manager
nodeName: system-0-65529
securityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priority: 0
enableServiceLinks: false
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: PodReadyToStartContainers
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:40Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:53Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2025-04-17T22:04:40Z'
hostIP: 10.108.0.3
podIP: 10.244.1.12
podIPs:
  - ip: 10.244.1.12
startTime: '2025-04-17T22:04:40Z'
containerStatuses:
  - name: cert-manager-controller
    state:
      running:
        startedAt: '2025-04-17T22:04:53Z'
    lastState: {}
    ready: true
    restartCount: 0
    image: quay.io/jetstack/cert-manager-controller:v1.15.1
    imageID: >-
      quay.io/jetstack/cert-manager-controller@sha256:057ace5734b53ebdec20b3a0d182c37c9ef0014e9f6364f9b99018e76936e984
    containerID: >-
      containerd://fe1ef374731d303469cad448a6d65e723c106ed2ae8912f83738e6fe4de0c506
    started: true
qosClass: BestEffort

metadata:
  name: cert-manager-5798486f6b-qppb7
  generateName: cert-manager-5798486f6b-
  namespace: cert-manager
  uid: b0a0fda3-26b6-4c05-9a27-c8939dd5dba5
  resourceVersion: '92139839'
  creationTimestamp: '2025-04-17T22:04:40Z'
  labels:
    app: cert-manager
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/version: v1.15.1
    pod-template-hash: 5798486f6b
  annotations:
    prometheus.io/path: /metrics
    prometheus.io/port: '9402'
    prometheus.io/scrape: 'true'
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: cert-manager-5798486f6b
      uid: ac414207-ae28-4eaf-bccb-4db76518ddde
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: kube-api-access-rgrzn
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  containers:
    - name: cert-manager-controller
      image: quay.io/jetstack/cert-manager-controller:v1.15.1
      args:
        - '--v=2'
        - '--cluster-resource-namespace=$(POD_NAMESPACE)'
        - '--leader-election-namespace=kube-system'
        - >-
          --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.1
        - '--max-concurrent-challenges=60'
      ports:
        - name: http-metrics
          containerPort: 9402
          protocol: TCP
        - name: http-healthz
          containerPort: 9403
          protocol: TCP
      env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
      resources: {}
      volumeMounts:
        - name: kube-api-access-rgrzn
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      livenessProbe:
        httpGet:
          path: /livez
          port: http-healthz
          scheme: HTTP
        initialDelaySeconds: 10
        timeoutSeconds: 15
        periodSeconds: 10
        successThreshold: 1
        failureThreshold: 8
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: IfNotPresent
      securityContext:
        capabilities:
          drop:
            - ALL
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  nodeSelector:
    kubernetes.io/os: linux
  serviceAccountName: cert-manager
  serviceAccount: cert-manager
  nodeName: system-0-65529
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priority: 0
  enableServiceLinks: false
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:40Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:53Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-04-17T22:04:40Z'
  hostIP: 10.108.0.3
  podIP: 10.244.1.12
  podIPs:
    - ip: 10.244.1.12
  startTime: '2025-04-17T22:04:40Z'
  containerStatuses:
    - name: cert-manager-controller
      state:
        running:
          startedAt: '2025-04-17T22:04:53Z'
      lastState: {}
      ready: true
      restartCount: 0
      image: quay.io/jetstack/cert-manager-controller:v1.15.1
      imageID: >-
        quay.io/jetstack/cert-manager-controller@sha256:057ace5734b53ebdec20b3a0d182c37c9ef0014e9f6364f9b99018e76936e984
      containerID: >-
        containerd://fe1ef374731d303469cad448a6d65e723c106ed2ae8912f83738e6fe4de0c506
      started: true
  qosClass: BestEffort

I0417 22:04:53.364190       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.245.0.10:53"]
W0417 22:04:53.364366       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0417 22:04:53.382646       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0417 22:04:53.382686       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0417 22:04:53.382733       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0417 22:04:53.383150       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0417 22:04:53.383769       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0417 22:04:53.383835       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0417 22:04:53.432470       1 leaderelection.go:250] attempting to acquire leader lease kube-system/cert-manager-controller...
I0417 22:04:53.475537       1 leaderelection.go:260] successfully acquired lease kube-system/cert-manager-controller
I0417 22:04:53.476522       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0417 22:04:53.528205       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0417 22:04:53.572048       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0417 22:04:53.581230       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0417 22:04:53.622689       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0417 22:04:53.636219       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0417 22:04:53.671456       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0417 22:04:53.683459       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0417 22:04:53.699126       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0417 22:04:53.703220       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0417 22:04:53.712061       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0417 22:04:53.716739       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0417 22:04:53.743661       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0417 22:04:53.764908       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0417 22:04:53.766115       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0417 22:04:53.766162       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0417 22:04:53.767168       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0417 22:04:53.781178       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0417 22:04:53.783581       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0417 22:04:53.787866       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0417 22:04:53.796550       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0417 22:04:53.796585       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0417 22:04:53.796596       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0417 22:04:53.797093       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0417 22:04:53.807216       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.807952       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.813424       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.814896       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.816781       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.820954       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.829103       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.832175       1 util.go:83] "owning resource not found in cache" logger="cert-manager.controller.certificaterequests-issuer-acme.handleOwnedResource" resource_name="bikexbike-tls-1-1805062057" resource_namespace="bikexbike" resource_kind="Order" resource_version="v1" related_resource_namespace="bikexbike" related_resource_name="bikexbike-tls-1" related_resource_kind="CertificateRequest"
I0417 22:04:53.831957       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.832048       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.844556       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0417 22:04:53.844846       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
E0417 22:04:53.925661       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="bikexbike/bikexbike-tls-1-1805062057"
E0417 22:04:53.931233       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="bikexbike/bikexbike-tls-2-1805062057"
E0417 22:04:53.932386       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="bikexbike/bikexbike-tls-3-1805062057"
E0417 22:04:53.933411       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="bikexbike/bikexbike-tls-4-1805062057"
E0417 22:04:53.934431       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="bikexbike/bikexbike-tls-5-1805062057"
E0417 22:04:53.994389       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-2-1141054968"
E0417 22:04:53.995275       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-3-1141054968"
E0417 22:04:53.995958       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-4-1141054968"
E0417 22:04:53.996699       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-5-1141054968"
E0417 22:04:53.997526       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-6-1141054968"
E0417 22:04:54.004868       1 controller.go:162] "re-queuing item due to error processing" err="ACME client for issuer not initialised/available" logger="cert-manager.controller" key="kubeintel/kubeintel-tls-1-3367586824"
I0417 22:04:54.005077       1 setup.go:208] "skipping re-verifying ACME account as cached registration details look sufficient" logger="cert-manager.controller" resource_name="letsencrypt-prod" resource_namespace="bikexbike" resource_kind="Issuer" resource_version="v1" related_resource_name="letsencrypt-prod" related_resource_namespace="bikexbike" related_resource_kind="Secret"
I0417 22:04:54.005217       1 setup.go:208] "skipping re-verifying ACME account as cached registration details look sufficient" logger="cert-manager.controller" resource_name="letsencrypt-staging" resource_namespace="kubeintel" resource_kind="Issuer" resource_version="v1" related_resource_name="letsencrypt-staging" related_resource_namespace="kubeintel" related_resource_kind="Secret"
I0417 22:04:54.006048       1 setup.go:208] "skipping re-verifying ACME account as cached registration details look sufficient" logger="cert-manager.controller" resource_name="letsencrypt-prod" resource_namespace="kubeintel" resource_kind="Issuer" resource_version="v1" related_resource_name="letsencrypt-prod" related_resource_namespace="kubeintel" related_resource_kind="Secret"
I0417 22:04:58.851481       1 setup.go:208] "skipping re-verifying ACME account as cached registration details look sufficient" logger="cert-manager.controller" resource_name="letsencrypt-prod" resource_namespace="bikexbike" resource_kind="Issuer" resource_version="v1" related_resource_name="letsencrypt-prod" related_resource_namespace="bikexbike" related_resource_kind="Secret"
I0417 22:04:58.853194       1 setup.go:208] "skipping re-verifying ACME account as cached registration details look sufficient" logger="cert-manager.controller" resource_name="letsencrypt-prod" resource_namespace="kubeintel" resource_kind="Issuer" resource_version="v1" related_resource_name="letsencrypt-prod" related_resource_namespace="kubeintel" related_resource_kind="Secret"
I0419 07:37:51.055689       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:08.471653       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:08.484148       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:08.613143       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:08.973248       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.179945       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.192290       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.419497       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.470520       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.521967       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0419 07:38:09.541201       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.475072       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.521868       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.561554       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.700355       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.781419       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.872803       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.973282       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:08.991218       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:09.070985       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:09.104715       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0422 07:41:09.377907       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0427 20:18:37.010151       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="kubeintel/kubeintel-tls" reason="Renewing" message="Renewing certificate as renewal was scheduled at 2025-04-27 20:18:37 +0000 UTC"
I0427 20:18:37.011063       1 conditions.go:203] Setting lastTransitionTime for Certificate "kubeintel-tls" condition "Issuing" to 2025-04-27 20:18:37.010498993 +0000 UTC m=+857623.785769267
I0427 20:18:37.102565       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="kubeintel/kubeintel-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kubeintel-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 20:18:37.158948       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kubeintel-tls-7" condition "Approved" to 2025-04-27 20:18:37.158930309 +0000 UTC m=+857623.934200605
I0427 20:18:37.211794       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kubeintel-tls-7" condition "Ready" to 2025-04-27 20:18:37.211763891 +0000 UTC m=+857623.987034149
W0427 20:18:38.749976       1 warnings.go:70] metadata.finalizers: "finalizer.acme.cert-manager.io": prefer a domain-qualified finalizer name to avoid accidental conflicts with other finalizer writers
I0427 20:18:38.824396       1 pod.go:71] "creating HTTP01 challenge solver pod" logger="cert-manager.controller.http01.ensurePod" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01"
I0427 20:18:38.960173       1 pod.go:59] "found one existing HTTP01 solver pod" logger="cert-manager.controller.http01.selfCheck.http01.ensurePod" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-dfvjs" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:38.960459       1 service.go:45] "found one existing HTTP01 solver Service for challenge resource" logger="cert-manager.controller.http01.selfCheck.http01.ensureService" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-cmhbq" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:38.963654       1 ingress.go:99] "found one existing HTTP01 solver ingress" logger="cert-manager.controller.http01.selfCheck.http01.ensureIngress" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-7cmgv" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
E0427 20:18:39.120040       1 sync.go:190] "propagation check failed" err="wrong status code '404', expected '200'" logger="cert-manager.controller" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01"
I0427 20:18:39.135793       1 pod.go:59] "found one existing HTTP01 solver pod" logger="cert-manager.controller.http01.selfCheck.http01.ensurePod" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-dfvjs" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:39.136033       1 service.go:45] "found one existing HTTP01 solver Service for challenge resource" logger="cert-manager.controller.http01.selfCheck.http01.ensureService" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-cmhbq" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:39.136154       1 ingress.go:99] "found one existing HTTP01 solver ingress" logger="cert-manager.controller.http01.selfCheck.http01.ensureIngress" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-7cmgv" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
E0427 20:18:39.209792       1 sync.go:190] "propagation check failed" err="wrong status code '404', expected '200'" logger="cert-manager.controller" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01"
I0427 20:18:49.121247       1 pod.go:59] "found one existing HTTP01 solver pod" logger="cert-manager.controller.http01.selfCheck.http01.ensurePod" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-dfvjs" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:49.121328       1 service.go:45] "found one existing HTTP01 solver Service for challenge resource" logger="cert-manager.controller.http01.selfCheck.http01.ensureService" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-cmhbq" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
I0427 20:18:49.121660       1 ingress.go:99] "found one existing HTTP01 solver ingress" logger="cert-manager.controller.http01.selfCheck.http01.ensureIngress" resource_name="kubeintel-tls-7-1141054968-1826645175" resource_namespace="kubeintel" resource_kind="Challenge" resource_version="v1" dnsName="demo.kubeintel.io" type="HTTP-01" related_resource_name="cm-acme-http-solver-7cmgv" related_resource_namespace="kubeintel" related_resource_kind="" related_resource_version=""
E0427 20:18:59.544029       1 controller.go:98] ingress 'kubeintel/cm-acme-http-solver-7cmgv' in work queue no longer exists
I0427 20:19:02.005390       1 acme.go:233] "certificate issued" logger="cert-manager.controller.sign" resource_name="kubeintel-tls-7" resource_namespace="kubeintel" resource_kind="CertificateRequest" resource_version="v1" related_resource_name="kubeintel-tls-7-1141054968" related_resource_namespace="kubeintel" related_resource_kind="Order" related_resource_version="v1"
I0427 20:19:02.007105       1 conditions.go:252] Found status change for CertificateRequest "kubeintel-tls-7" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2025-04-27 20:19:02.007087798 +0000 UTC m=+857648.782358093
E0427 20:19:02.056587       1 controller.go:208] "challenge in work queue no longer exists" err="challenge.acme.cert-manager.io \"kubeintel-tls-7-1141054968-1826645175\" not found" logger="cert-manager.controller"
I0427 20:19:02.078539       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="kubeintel/kubeintel-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kubeintel-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 20:19:02.101449       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="kubeintel/kubeintel-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kubeintel-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 20:19:02.110044       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="kubeintel/kubeintel-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kubeintel-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0429 12:37:38.424585       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:37:43.303060       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:07.337749       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:08.777068       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:08.931158       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:08.948093       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:09.019205       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:09.024096       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:09.198506       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:09.313750       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0429 12:38:09.342575       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232