I0730 19:22:55.413793       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0730 19:22:55.413965       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0730 19:22:55.417107       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0730 19:22:55.417143       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0730 19:22:55.417154       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0730 19:22:55.417631       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0730 19:22:55.417669       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0730 19:22:55.417824       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0730 19:22:55.423676       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0730 19:22:55.439850       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0730 19:22:55.444604       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0730 19:22:55.447276       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0730 19:22:55.452358       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0730 19:22:55.456364       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0730 19:22:55.458746       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0730 19:22:55.460685       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0730 19:22:55.462681       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0730 19:22:55.462709       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0730 19:22:55.462802       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0730 19:22:55.468341       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0730 19:22:55.472670       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0730 19:22:55.476523       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0730 19:22:55.478572       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0730 19:22:55.480621       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0730 19:22:55.482577       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0730 19:22:55.484754       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0730 19:22:55.487047       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0730 19:22:55.490934       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0730 19:22:55.493432       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0730 19:22:55.495955       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0730 19:22:55.495978       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0730 19:22:55.495986       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0730 19:22:55.495994       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0730 19:22:55.496483       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0730 19:22:55.499346       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.499795       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.499939       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.500378       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.500531       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.501048       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.545085       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.566782       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.577227       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.601866       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:22:55.623705       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 19:23:14.716578       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-30 19:23:14.716558801 +0000 UTC m=+19.331185530
I0730 19:23:15.489487       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:23:15.489602       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 19:23:15.489586433 +0000 UTC m=+20.104213252
I0730 19:23:15.489757       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-30 19:23:15.489734846 +0000 UTC m=+20.104361665
E0730 19:23:15.503377       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0730 19:23:15.503459       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-30 19:23:15.503446631 +0000 UTC m=+20.118073350
E0730 19:23:15.503533       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0730 19:23:15.503846       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:15.504007       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:23:15.504044       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 19:23:15.504029307 +0000 UTC m=+20.118656076
E0730 19:23:15.516262       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0730 19:23:15.516482       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 19:23:15.516582       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 19:23:15.516684       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0730 19:23:15.547866       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:15.557827       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-30 19:23:15.557812215 +0000 UTC m=+20.172438954
I0730 19:23:15.592564       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-30 19:23:15.592548836 +0000 UTC m=+20.207175565
I0730 19:23:15.622934       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:23:15.622918533 +0000 UTC m=+20.237545282
I0730 19:23:15.638548       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:15.639151       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:23:15.639138124 +0000 UTC m=+20.253764883
I0730 19:23:15.646523       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:15.655645       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:15.656049       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:23:15.656039272 +0000 UTC m=+20.270666001
I0730 19:23:15.656998       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:20.516716       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:23:20.516702239 +0000 UTC m=+25.131328968
I0730 19:23:41.421608       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:23:41.421693       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 19:23:41.421683308 +0000 UTC m=+46.036310057
I0730 19:23:41.421757       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-30 19:23:41.421739549 +0000 UTC m=+46.036366278
I0730 19:23:41.429050       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-30 19:23:41.429038983 +0000 UTC m=+46.043665702
I0730 19:23:41.434146       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:41.434196       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:23:41.434212       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 19:23:41.43420537 +0000 UTC m=+46.048832089
I0730 19:23:41.614698       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:41.623700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-30 19:23:41.623689231 +0000 UTC m=+46.238315960
I0730 19:23:41.649686       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-30 19:23:41.64967045 +0000 UTC m=+46.264297199
I0730 19:23:41.672907       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:23:41.672893447 +0000 UTC m=+46.287520196
I0730 19:23:41.693010       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:23:41.734372       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:34:34.987776       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-07-30 19:34:34.987755068 +0000 UTC m=+699.602381807
I0730 19:34:34.987776       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:34:34.987944       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-07-30 19:34:34.987937702 +0000 UTC m=+699.602564441
I0730 19:34:35.001647       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:34:35.001727       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:34:35.001747       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-07-30 19:34:35.001739478 +0000 UTC m=+699.616366227
I0730 19:34:35.378784       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:34:35.394080       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-1" condition "Approved" to 2026-07-30 19:34:35.394060292 +0000 UTC m=+700.008687061
I0730 19:34:35.413438       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-1" condition "Ready" to 2026-07-30 19:34:35.413426935 +0000 UTC m=+700.028053654
I0730 19:34:35.444128       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:34:35.444107896 +0000 UTC m=+700.058734655
I0730 19:34:35.461920       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:34:35.462509       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:34:35.462500843 +0000 UTC m=+700.077127572
I0730 19:34:35.469060       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:34:35.477614       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:38:32.548737       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-30 19:38:32.548709282 +0000 UTC m=+937.163336011
I0730 19:38:32.548889       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:38:32.548995       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 19:38:32.54898619 +0000 UTC m=+937.163612909
I0730 19:38:32.558829       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:38:32.558944       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 19:38:32.559044       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 19:38:32.559029075 +0000 UTC m=+937.173655904
I0730 19:38:32.707959       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:38:32.723078       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-30 19:38:32.723064485 +0000 UTC m=+937.337691244
I0730 19:38:32.738047       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-30 19:38:32.738038072 +0000 UTC m=+937.352664791
I0730 19:38:32.759794       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:38:32.759782627 +0000 UTC m=+937.374409356
I0730 19:38:32.772123       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 19:38:32.772661       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 19:38:32.772653708 +0000 UTC m=+937.387280437
I0730 19:38:32.784870       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"