I0624 09:38:42.296373 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 09:38:42.296536 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 09:38:42.299598 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 09:38:42.299620 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0624 09:38:42.299629 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0624 09:38:42.300048 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0624 09:38:42.300094 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 09:38:42.300236 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 09:38:42.302911 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 09:38:42.318263 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 09:38:42.325013 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 09:38:42.327553 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 09:38:42.329983 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 09:38:42.330084 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 09:38:42.332564 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 09:38:42.334455 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 09:38:42.337215 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 09:38:42.341763 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 09:38:42.341815 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 09:38:42.341793 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 09:38:42.344434 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 09:38:42.346768 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 09:38:42.346806 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0624 09:38:42.349074 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 09:38:42.349220 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 09:38:42.351160 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 09:38:42.353673 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 09:38:42.359063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 09:38:42.361522 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 09:38:42.363892 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 09:38:42.366239 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 09:38:42.366323 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 09:38:42.368715 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 09:38:42.371317 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 09:38:42.377664 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.379217 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.379291 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.379659 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.379955 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.380857 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.397089 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.418924 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.439160 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.455582 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:42.469657 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 09:38:59.693858 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 09:38:59.693795393 +0000 UTC m=+17.422810538 I0624 09:39:00.465827 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 09:39:00.465909 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 09:39:00.465897137 +0000 UTC m=+18.194912282 I0624 09:39:00.465956 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 09:39:00.465946998 +0000 UTC m=+18.194962113 E0624 09:39:00.502593 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 09:39:00.502712 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 09:39:00.50269931 +0000 UTC m=+18.231714445 E0624 09:39:00.502876 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 09:39:00.503649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:00.503868 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 09:39:00.503907 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 09:39:00.503897322 +0000 UTC m=+18.232912457 E0624 09:39:00.581195 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0624 09:39:00.581348 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 09:39:00.581383 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 09:39:00.581450 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0624 09:39:00.621904 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:00.640718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-24 09:39:00.640709861 +0000 UTC m=+18.369724976 I0624 09:39:00.667971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-24 09:39:00.66795812 +0000 UTC m=+18.396973255 I0624 09:39:00.692558 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 09:39:00.692530239 +0000 UTC m=+18.421545354 I0624 09:39:00.704982 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:00.705690 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 09:39:00.70568213 +0000 UTC m=+18.434697245 I0624 09:39:00.715194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:00.715197 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:05.582086 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 09:39:05.582067965 +0000 UTC m=+23.311083110 I0624 09:39:31.305686 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 09:39:31.305545233 +0000 UTC m=+49.034560348 I0624 09:39:31.305633 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 09:39:31.305915 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 09:39:31.305909138 +0000 UTC m=+49.034924263 I0624 09:39:31.317749 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 09:39:31.317735904 +0000 UTC m=+49.046751009 I0624 09:39:31.324311 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:31.324367 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 09:39:31.324361062 +0000 UTC m=+49.053376167 I0624 09:39:31.606896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 09:39:31.635892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-24 09:39:31.635882906 +0000 UTC m=+49.364898021 I0624 09:39:31.658972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-24 09:39:31.658962349 +0000 UTC m=+49.387977464 I0624 09:39:31.683598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 09:39:31.683587085 +0000 UTC m=+49.412602200 I0624 09:39:31.717420 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" E0624 09:41:34.786940 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0624 09:42:37.095129 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0624 09:42:44.696622 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0624 09:43:07.810565 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0624 09:43:10.089418 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0624 09:43:10.089501 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0624 09:43:12.500439 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0624 09:43:12.500556 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders" I0624 09:43:12.500947 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager" I0624 09:43:12.500962 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver" I0624 09:43:12.500969 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers" I0624 09:43:12.500975 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim" I0624 09:43:12.500980 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics" I0624 09:43:12.500985 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness" I0624 09:43:12.500990 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi" I0624 09:43:12.501001 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager" I0624 09:43:12.501006 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault" I0624 09:43:12.501012 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing" I0624 09:43:12.501017 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager" I0624 09:43:12.501024 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned" I0624 09:43:12.501037 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges" I0624 09:43:12.501042 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme" I0624 09:43:12.501047 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers" I0624 09:43:12.501053 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger" I0624 09:43:12.501058 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca" E0624 09:43:12.504717 1 main.go:40] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"