I0725 16:30:46.973106       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0725 16:30:46.973434       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0725 16:30:46.982501       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0725 16:30:46.982527       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0725 16:30:46.982551       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0725 16:30:46.983472       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0725 16:30:46.984373       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0725 16:30:46.984465       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0725 16:30:46.987070       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0725 16:30:47.001359       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0725 16:30:47.005494       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0725 16:30:47.005621       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0725 16:30:47.010428       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0725 16:30:47.013399       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0725 16:30:47.013535       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0725 16:30:47.020349       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0725 16:30:47.022697       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0725 16:30:47.023909       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0725 16:30:47.026221       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0725 16:30:47.030729       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0725 16:30:47.034453       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0725 16:30:47.037423       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0725 16:30:47.039104       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0725 16:30:47.040975       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0725 16:30:47.043402       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0725 16:30:47.045241       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0725 16:30:47.049743       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0725 16:30:47.055371       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0725 16:30:47.055398       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0725 16:30:47.055406       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0725 16:30:47.055482       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0725 16:30:47.057819       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0725 16:30:47.057941       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0725 16:30:47.060563       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0725 16:30:47.063184       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.064393       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.064590       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.064906       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.065434       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.085059       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.128597       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.143182       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.165119       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.181348       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:30:47.202452       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 16:31:07.417558       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 16:31:07.417526978 +0000 UTC m=+20.473648743
I0725 16:31:09.614307       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 16:31:09.614292204 +0000 UTC m=+22.670413969
I0725 16:31:09.614957       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 16:31:09.615035       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 16:31:09.61502387 +0000 UTC m=+22.671145625
I0725 16:31:10.246211       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:10.246310       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 16:31:10.246496       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 16:31:10.246483944 +0000 UTC m=+23.302605709
E0725 16:31:10.415473       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 16:31:10.415584       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 16:31:10.415573545 +0000 UTC m=+23.471695300
E0725 16:31:10.415612       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 16:31:11.079013       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0725 16:31:11.079484       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 16:31:11.079534       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 16:31:11.079579       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0725 16:31:11.339460       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 16:31:11.339447387 +0000 UTC m=+24.395569142
I0725 16:31:11.517848       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 16:31:11.517830337 +0000 UTC m=+24.573952102
I0725 16:31:11.814358       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:11.814347526 +0000 UTC m=+24.870469241
I0725 16:31:11.933376       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:11.934046       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:11.93403539 +0000 UTC m=+24.990157145
I0725 16:31:12.133951       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:16.079499       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:16.079481622 +0000 UTC m=+29.135603387
I0725 16:31:22.685544       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 16:31:22.685578       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-25 16:31:22.685571926 +0000 UTC m=+35.741693661
I0725 16:31:22.685927       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-25 16:31:22.685921343 +0000 UTC m=+35.742043078
I0725 16:31:22.738941       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:22.739150       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 16:31:22.739185       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-25 16:31:22.739178997 +0000 UTC m=+35.795300722
E0725 16:31:22.760487       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0725 16:31:22.760550       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-25 16:31:22.760543669 +0000 UTC m=+35.816665384
I0725 16:31:22.760680       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0725 16:31:22.821905       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
E0725 16:31:22.821990       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0725 16:31:22.822014       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0725 16:31:22.822036       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
I0725 16:31:22.889032       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-25 16:31:22.889019691 +0000 UTC m=+35.945141416
I0725 16:31:22.889431       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 16:31:22.889448       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-25 16:31:22.889444681 +0000 UTC m=+35.945566406
I0725 16:31:22.947547       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:22.947611       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-25 16:31:22.947602205 +0000 UTC m=+36.003723940
I0725 16:31:23.335141       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:23.335727       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-25 16:31:23.335716734 +0000 UTC m=+36.391838489
I0725 16:31:23.426749       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-25 16:31:23.426731569 +0000 UTC m=+36.482853334
I0725 16:31:23.446908       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:23.849783       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:23.849762716 +0000 UTC m=+36.905884471
I0725 16:31:23.869063       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-25 16:31:23.869050412 +0000 UTC m=+36.925172167
I0725 16:31:23.911465       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:23.912191       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:23.912180346 +0000 UTC m=+36.968302061
I0725 16:31:24.117449       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-25 16:31:24.117432204 +0000 UTC m=+37.173553929
I0725 16:31:24.214638       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:27.823189       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:27.823176903 +0000 UTC m=+40.879298668
I0725 16:31:27.967271       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:27.967259507 +0000 UTC m=+41.023381242
I0725 16:31:28.111799       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:28.111781823 +0000 UTC m=+41.167903578
I0725 16:31:28.201972       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0725 16:31:28.202738       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 16:31:28.202726867 +0000 UTC m=+41.258848622
I0725 16:31:28.348476       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"