I0703 19:29:00.415189       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0703 19:29:00.415424       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0703 19:29:00.420628       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0703 19:29:00.420664       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0703 19:29:00.420679       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0703 19:29:00.421346       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0703 19:29:00.421429       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0703 19:29:00.421435       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0703 19:29:00.425766       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0703 19:29:00.439369       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0703 19:29:00.439540       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0703 19:29:00.444669       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0703 19:29:00.448284       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0703 19:29:00.450709       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0703 19:29:00.452973       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0703 19:29:00.455154       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0703 19:29:00.457346       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0703 19:29:00.462112       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0703 19:29:00.466456       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0703 19:29:00.468432       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0703 19:29:00.468458       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0703 19:29:00.470720       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0703 19:29:00.472899       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0703 19:29:00.475079       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0703 19:29:00.477012       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0703 19:29:00.481062       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0703 19:29:00.481176       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0703 19:29:00.483747       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0703 19:29:00.486421       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0703 19:29:00.490891       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0703 19:29:00.492852       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0703 19:29:00.492869       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0703 19:29:00.492876       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0703 19:29:00.492890       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0703 19:29:00.496097       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.496379       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.498031       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.499645       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.499919       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.531317       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.549227       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.572541       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.590388       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.614862       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:00.634545       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 19:29:15.330326       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-03 19:29:15.330308152 +0000 UTC m=+14.936736398
I0703 19:29:16.123348       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 19:29:16.123399       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 19:29:16.123383925 +0000 UTC m=+15.729812191
I0703 19:29:16.123472       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 19:29:16.123455408 +0000 UTC m=+15.729883684
E0703 19:29:16.167475       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0703 19:29:16.167603       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-03 19:29:16.167591823 +0000 UTC m=+15.774020089
E0703 19:29:16.167634       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0703 19:29:16.168817       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 19:29:16.169180       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 19:29:16.169259       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 19:29:16.169247173 +0000 UTC m=+15.775675439
E0703 19:29:16.198603       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0703 19:29:16.198984       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 19:29:16.199625       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 19:29:16.199805       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0703 19:29:16.257963       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 19:29:16.288015       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-03 19:29:16.287996712 +0000 UTC m=+15.894424988
I0703 19:29:16.392566       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-03 19:29:16.392550083 +0000 UTC m=+15.998978359
I0703 19:29:16.439158       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 19:29:16.439147556 +0000 UTC m=+16.045575792
I0703 19:29:16.474960       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 19:29:21.199899       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 19:29:21.199884723 +0000 UTC m=+20.806312999
I0703 19:29:59.458149       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 19:29:59.458198       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 19:29:59.458176815 +0000 UTC m=+59.064605081
I0703 19:29:59.458233       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 19:29:59.458221876 +0000 UTC m=+59.064650142
I0703 19:29:59.469997       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-03 19:29:59.469985421 +0000 UTC m=+59.076413687
I0703 19:29:59.476297       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 19:29:59.476413       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 19:29:59.476459       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 19:29:59.476449232 +0000 UTC m=+59.082877478
I0703 19:29:59.925139       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 19:29:59.945053       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-03 19:29:59.945041215 +0000 UTC m=+59.551469461
I0703 19:29:59.972874       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-03 19:29:59.972862507 +0000 UTC m=+59.579290753
I0703 19:30:00.000364       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 19:30:00.000353762 +0000 UTC m=+59.606782008
I0703 19:30:00.019459       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
E0703 19:32:40.719981       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path