I0725 12:56:18.781102       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0725 12:56:18.781406       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0725 12:56:18.785669       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0725 12:56:18.785698       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0725 12:56:18.785709       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0725 12:56:18.786262       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0725 12:56:18.786330       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0725 12:56:18.786350       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0725 12:56:18.790620       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0725 12:56:18.809653       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0725 12:56:18.813965       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0725 12:56:18.816623       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0725 12:56:18.818618       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0725 12:56:18.822560       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0725 12:56:18.824209       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0725 12:56:18.828629       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0725 12:56:18.831454       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0725 12:56:18.833394       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0725 12:56:18.833422       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0725 12:56:18.835365       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0725 12:56:18.837241       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0725 12:56:18.839099       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0725 12:56:18.841288       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0725 12:56:18.848612       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0725 12:56:18.850585       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0725 12:56:18.852578       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0725 12:56:18.854657       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0725 12:56:18.854693       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0725 12:56:18.857251       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0725 12:56:18.861466       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0725 12:56:18.864111       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0725 12:56:18.866500       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0725 12:56:18.866550       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0725 12:56:18.866565       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0725 12:56:18.878961       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.879231       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.879855       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.883832       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.884216       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.891918       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.913790       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.941214       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.955199       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.977403       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:18.995225       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 12:56:52.510290       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 12:56:52.510397       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 12:56:52.510378244 +0000 UTC m=+33.757984918
I0725 12:56:52.510570       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 12:56:52.510553316 +0000 UTC m=+33.758159940
I0725 12:56:52.523100       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 12:56:52.523090939 +0000 UTC m=+33.770697563
I0725 12:56:52.526727       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 12:56:52.527551       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 12:56:52.527615       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 12:56:52.527604414 +0000 UTC m=+33.775211038
I0725 12:56:52.743841       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-25 12:56:52.743818435 +0000 UTC m=+33.991425069
I0725 12:56:52.776751       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-25 12:56:52.776739281 +0000 UTC m=+34.024345915
I0725 12:56:52.808678       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 12:56:52.808662398 +0000 UTC m=+34.056269012
I0725 12:56:52.831429       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 12:56:52.832046       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 12:56:52.832038077 +0000 UTC m=+34.079644701
I0725 12:56:52.841192       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 12:56:52.853832       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:03:39.172301       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 13:03:39.172275771 +0000 UTC m=+440.419882415
I0725 13:03:39.983444       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:03:39.983525       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 13:03:39.983517204 +0000 UTC m=+441.231123858
I0725 13:03:39.983505       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 13:03:39.983485063 +0000 UTC m=+441.231091707
I0725 13:03:39.997685       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:03:39.997761       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:03:39.997779       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 13:03:39.997773245 +0000 UTC m=+441.245379859
E0725 13:03:39.999363       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 13:03:39.999538       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 13:03:39.999528151 +0000 UTC m=+441.247134805
E0725 13:03:39.999629       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:03:40.011257       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0725 13:03:40.011566       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:03:40.011625       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:03:40.011682       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0725 13:03:40.032654       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:03:40.045913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 13:03:40.045870455 +0000 UTC m=+441.293477109
I0725 13:03:40.071600       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 13:03:40.07158204 +0000 UTC m=+441.319188664
I0725 13:03:40.092529       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:03:40.092487946 +0000 UTC m=+441.340094590
I0725 13:03:40.105481       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:03:40.105933       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:03:40.10592427 +0000 UTC m=+441.353530894
I0725 13:03:40.118518       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:03:45.012488       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:03:45.012473528 +0000 UTC m=+446.260080172
I0725 13:08:06.120626       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-07-25 13:08:06.120597593 +0000 UTC m=+707.368204247
I0725 13:08:06.120775       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:08:06.122045       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-07-25 13:08:06.122033493 +0000 UTC m=+707.369640147
I0725 13:08:06.133144       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:08:06.133288       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:08:06.133345       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-07-25 13:08:06.133335186 +0000 UTC m=+707.380941810
I0725 13:08:06.262057       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:08:06.274053       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-1" condition "Approved" to 2026-07-25 13:08:06.27403231 +0000 UTC m=+707.521638944
I0725 13:08:06.293194       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-1" condition "Ready" to 2026-07-25 13:08:06.293176435 +0000 UTC m=+707.540783089
I0725 13:08:06.317230       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:08:06.317221922 +0000 UTC m=+707.564828546
I0725 13:08:06.329455       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:08:06.330334       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:08:06.330321332 +0000 UTC m=+707.577927976
I0725 13:08:06.345948       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:11:04.395510       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:11:04.395570       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 13:11:04.395557669 +0000 UTC m=+885.643164323
I0725 13:11:04.395852       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 13:11:04.395823644 +0000 UTC m=+885.643430358
I0725 13:11:04.409095       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:11:04.409231       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:11:04.409274       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 13:11:04.409261539 +0000 UTC m=+885.656868193
I0725 13:11:04.785511       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-25 13:11:04.78549148 +0000 UTC m=+886.033098124
I0725 13:11:04.801567       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-25 13:11:04.801550658 +0000 UTC m=+886.049157312
I0725 13:11:04.828519       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:11:04.828504079 +0000 UTC m=+886.076110703
I0725 13:11:04.841756       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:11:04.842255       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:11:04.84224625 +0000 UTC m=+886.089852874
I0725 13:11:04.857080       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"