I0707 20:31:55.685085       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0707 20:31:55.685263       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0707 20:31:55.689215       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0707 20:31:55.689246       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0707 20:31:55.689255       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0707 20:31:55.689922       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0707 20:31:55.689924       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0707 20:31:55.690037       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0707 20:31:55.694708       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0707 20:31:55.709051       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0707 20:31:55.713368       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0707 20:31:55.716968       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0707 20:31:55.721132       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0707 20:31:55.721277       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0707 20:31:55.723541       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0707 20:31:55.725521       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0707 20:31:55.727165       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0707 20:31:55.727184       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0707 20:31:55.727190       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0707 20:31:55.727238       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0707 20:31:55.729348       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0707 20:31:55.733253       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0707 20:31:55.735582       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0707 20:31:55.740558       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0707 20:31:55.743999       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0707 20:31:55.745966       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0707 20:31:55.746108       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0707 20:31:55.748056       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0707 20:31:55.749770       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0707 20:31:55.755708       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0707 20:31:55.755896       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0707 20:31:55.759764       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0707 20:31:55.762343       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0707 20:31:55.765117       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0707 20:31:55.768676       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.769066       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.769748       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.769900       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.770205       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.770607       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.812123       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.829337       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.842614       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.864936       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:31:55.880102       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0707 20:32:07.328915       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-07 20:32:07.328882485 +0000 UTC m=+11.667906474
I0707 20:32:08.125707       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-07 20:32:08.125689545 +0000 UTC m=+12.464713564
I0707 20:32:08.127470       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0707 20:32:08.127510       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-07 20:32:08.127500539 +0000 UTC m=+12.466524538
E0707 20:32:08.193511       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0707 20:32:08.193562       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-07 20:32:08.193553489 +0000 UTC m=+12.532577468
E0707 20:32:08.193607       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0707 20:32:08.196527       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:32:08.196690       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-07 20:32:08.196679436 +0000 UTC m=+12.535703405
E0707 20:32:08.233725       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0707 20:32:08.234985       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0707 20:32:08.235038       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0707 20:32:08.235317       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0707 20:32:08.281116       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:32:08.366760       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-07 20:32:08.366745495 +0000 UTC m=+12.705769464
I0707 20:32:08.553401       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-07 20:32:08.553384565 +0000 UTC m=+12.892408564
I0707 20:32:08.622656       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 20:32:08.622640833 +0000 UTC m=+12.961664832
I0707 20:32:08.683757       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:32:08.846341       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:32:13.235948       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 20:32:13.235934906 +0000 UTC m=+17.574958875
I0707 20:32:59.456551       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-07 20:32:59.456501339 +0000 UTC m=+63.795525338
I0707 20:32:59.457213       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0707 20:32:59.457248       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-07 20:32:59.457241402 +0000 UTC m=+63.796265391
I0707 20:32:59.506295       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-07 20:32:59.506280901 +0000 UTC m=+63.845304880
I0707 20:32:59.510620       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:32:59.510895       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0707 20:32:59.510940       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-07 20:32:59.510934694 +0000 UTC m=+63.849958653
I0707 20:33:00.583091       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-07 20:33:00.583064707 +0000 UTC m=+64.922088706
I0707 20:33:00.588548       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:33:00.620386       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-07 20:33:00.620376173 +0000 UTC m=+64.959400132
I0707 20:33:00.675396       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 20:33:00.675379263 +0000 UTC m=+65.014403232
I0707 20:33:00.734007       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0707 20:33:00.796092       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
E0707 20:36:21.861664       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
E0707 20:36:29.843856       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out
E0707 20:36:45.046138       1 leaderelection.go:340] Failed to update lock optimitically: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again, falling back to slow path