I0714 06:40:42.218789 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 06:40:42.219046 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 06:40:42.224447 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 06:40:42.224505 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0714 06:40:42.224520 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0714 06:40:42.225118 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0714 06:40:42.225139 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 06:40:42.225224 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 06:40:42.230042 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 06:40:42.246936 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 06:40:42.254591 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 06:40:42.257879 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 06:40:42.260380 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 06:40:42.260401 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 06:40:42.260411 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 06:40:42.260515 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 06:40:42.263206 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 06:40:42.265746 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 06:40:42.265907 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 06:40:42.271626 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 06:40:42.275045 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 06:40:42.277779 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0714 06:40:42.280170 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 06:40:42.280200 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 06:40:42.280304 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 06:40:42.282963 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 06:40:42.284942 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 06:40:42.286853 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 06:40:42.293512 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 06:40:42.297538 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 06:40:42.300275 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 06:40:42.302602 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 06:40:42.304384 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 06:40:42.306347 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 06:40:42.309397 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.310410 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.310027 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.312178 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.313850 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.333947 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.351102 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.376454 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.390024 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.406331 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:42.425222 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:58.881162 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 06:40:58.881131857 +0000 UTC m=+16.688376924 I0714 06:40:59.631616 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 06:40:59.631603212 +0000 UTC m=+17.438848269 I0714 06:40:59.632544 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:40:59.632565 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 06:40:59.63256177 +0000 UTC m=+17.439806807 E0714 06:40:59.643811 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 06:40:59.643875 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 06:40:59.643862207 +0000 UTC m=+17.451107264 E0714 06:40:59.643970 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 06:40:59.643988 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:59.644046 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:40:59.644069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 06:40:59.644064351 +0000 UTC m=+17.451309388 E0714 06:40:59.651680 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0714 06:40:59.651749 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 06:40:59.651772 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 06:40:59.651808 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0714 06:40:59.679627 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:59.694318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-14 06:40:59.694299978 +0000 UTC m=+17.501545015 I0714 06:40:59.721371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-14 06:40:59.721355319 +0000 UTC m=+17.528600356 I0714 06:40:59.743878 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:40:59.743860232 +0000 UTC m=+17.551105299 I0714 06:40:59.756649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:59.757061 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:40:59.757051656 +0000 UTC m=+17.564296693 I0714 06:40:59.768895 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:59.769521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:04.653094 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:41:04.653070567 +0000 UTC m=+22.460315624 I0714 06:41:26.752623 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 06:41:26.752606578 +0000 UTC m=+44.559851615 I0714 06:41:26.752973 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:41:26.754488 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 06:41:26.753065887 +0000 UTC m=+44.560310924 I0714 06:41:26.768384 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:26.768488 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:41:26.768519 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 06:41:26.768510334 +0000 UTC m=+44.575755371 I0714 06:41:26.769927 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 06:41:26.769919992 +0000 UTC m=+44.577165029 I0714 06:41:26.891887 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:26.906073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-14 06:41:26.906056561 +0000 UTC m=+44.713301628 I0714 06:41:26.930103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-14 06:41:26.930090684 +0000 UTC m=+44.737335721 I0714 06:41:26.959206 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:41:26.959194934 +0000 UTC m=+44.766439961 I0714 06:41:26.971515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:26.972171 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:41:26.972160124 +0000 UTC m=+44.779405161 I0714 06:41:26.985054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:26.986747 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.475204 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:17.475380 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Issuing" to 2026-07-14 06:43:17.475367916 +0000 UTC m=+155.282612973 I0714 06:43:17.475382 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Ready" to 2026-07-14 06:43:17.475296125 +0000 UTC m=+155.282541162 I0714 06:43:17.478274 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Ready" to 2026-07-14 06:43:17.478268062 +0000 UTC m=+155.285513099 I0714 06:43:17.478351 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-client" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:17.478424 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Issuing" to 2026-07-14 06:43:17.478413725 +0000 UTC m=+155.285658752 I0714 06:43:17.494350 1 conditions.go:96] Setting lastTransitionTime for Issuer "cloudnative-pg-barman-cloud-selfsigned-issuer" condition "Ready" to 2026-07-14 06:43:17.494334911 +0000 UTC m=+155.301579948 I0714 06:43:17.497097 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.497286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.499107 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:17.499120 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-client" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:17.499152 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Issuing" to 2026-07-14 06:43:17.499146962 +0000 UTC m=+155.306391999 I0714 06:43:17.499156 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Issuing" to 2026-07-14 06:43:17.499145832 +0000 UTC m=+155.306390859 I0714 06:43:17.628029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.645256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Approved" to 2026-07-14 06:43:17.645243109 +0000 UTC m=+155.452488136 I0714 06:43:17.665145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Ready" to 2026-07-14 06:43:17.665133011 +0000 UTC m=+155.472378038 I0714 06:43:17.706634 1 conditions.go:192] Found status change for Certificate "barman-cloud-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:17.706607567 +0000 UTC m=+155.513852624 I0714 06:43:17.724890 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.725865 1 conditions.go:192] Found status change for Certificate "barman-cloud-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:17.725852437 +0000 UTC m=+155.533097474 I0714 06:43:17.746249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.797150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.827886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Approved" to 2026-07-14 06:43:17.827866556 +0000 UTC m=+155.635111593 I0714 06:43:17.845431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Ready" to 2026-07-14 06:43:17.845411613 +0000 UTC m=+155.652656680 I0714 06:43:17.873460 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:17.873447781 +0000 UTC m=+155.680692808 I0714 06:43:17.888452 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.889344 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:17.889331607 +0000 UTC m=+155.696576674 I0714 06:43:17.904212 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:17.904815 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:17.904802343 +0000 UTC m=+155.712047380 I0714 06:43:17.908814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again"