I0622 01:57:28.374081 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0622 01:57:28.374211 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0622 01:57:28.374435 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0622 01:57:28.380790 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0622 01:57:28.381211 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0622 01:57:28.381308 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0622 01:57:28.381339 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0622 01:57:28.383938 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0622 01:57:28.396644 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0622 01:57:28.400898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0622 01:57:28.403740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0622 01:57:28.409177 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0622 01:57:28.409206 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0622 01:57:28.409280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0622 01:57:28.411864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0622 01:57:28.411911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0622 01:57:28.414339 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0622 01:57:28.416693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0622 01:57:28.419036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0622 01:57:28.421317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0622 01:57:28.423083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0622 01:57:28.427501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0622 01:57:28.431581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0622 01:57:28.433680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0622 01:57:28.436078 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0622 01:57:28.436132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0622 01:57:28.438738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0622 01:57:28.441183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0622 01:57:28.443107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0622 01:57:28.445129 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0622 01:57:28.445153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0622 01:57:28.445155 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0622 01:57:28.447485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0622 01:57:28.450394 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.450588 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.451283 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.452561 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.470774 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.484964 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.507203 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.518341 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.536539 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:28.544357 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:57:40.737717 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-22 01:57:40.737692578 +0000 UTC m=+12.392252951 I0622 01:57:41.488565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:57:41.488639 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 01:57:41.488629809 +0000 UTC m=+13.143190182 I0622 01:57:41.488668 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-22 01:57:41.488651439 +0000 UTC m=+13.143211812 E0622 01:57:41.551965 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 01:57:41.552196 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-22 01:57:41.552178083 +0000 UTC m=+13.206738466 E0622 01:57:41.552299 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 01:57:41.556820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:57:41.557282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:57:41.557337 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 01:57:41.55732909 +0000 UTC m=+13.211889433 E0622 01:57:41.563766 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0622 01:57:41.563902 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:57:41.563960 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:57:41.564015 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0622 01:57:41.630476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qrnlq" condition "Approved" to 2026-06-22 01:57:41.630456935 +0000 UTC m=+13.285017378 I0622 01:57:41.784493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qrnlq" condition "Ready" to 2026-06-22 01:57:41.784483005 +0000 UTC m=+13.439043348 I0622 01:57:41.812768 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:57:41.812751329 +0000 UTC m=+13.467311682 I0622 01:57:41.898367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:57:46.565187 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:57:46.565168646 +0000 UTC m=+18.219729029 I0622 01:58:11.394023 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-22 01:58:11.394008915 +0000 UTC m=+43.048569268 I0622 01:58:11.394398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:58:11.394629 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 01:58:11.394613454 +0000 UTC m=+43.049173837 I0622 01:58:11.404374 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-22 01:58:11.40436288 +0000 UTC m=+43.058923233 I0622 01:58:11.416423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:58:11.416495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:58:11.416555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 01:58:11.416516422 +0000 UTC m=+43.071076775 I0622 01:58:11.613822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:58:11.618296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r6xsx" condition "Approved" to 2026-06-22 01:58:11.618280967 +0000 UTC m=+43.272841360 I0622 01:58:11.671154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r6xsx" condition "Ready" to 2026-06-22 01:58:11.671145646 +0000 UTC m=+43.325705999 I0622 01:58:11.697166 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:58:11.697148087 +0000 UTC m=+43.351708460 I0622 01:58:11.715913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:58:11.770105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.095902 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-22 01:59:53.095869414 +0000 UTC m=+144.750429787 I0622 01:59:53.095996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:59:53.096022 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-22 01:59:53.096014958 +0000 UTC m=+144.750575331 E0622 01:59:53.110547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0622 01:59:53.110618 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-06-22 01:59:53.110609269 +0000 UTC m=+144.765169622 I0622 01:59:53.110674 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0622 01:59:53.112505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.112586 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-22 01:59:53.112579793 +0000 UTC m=+144.767140136 E0622 01:59:53.119371 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0622 01:59:53.119489 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0622 01:59:53.119544 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0622 01:59:53.119581 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0622 01:59:53.121732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:59:53.121764 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-22 01:59:53.121757619 +0000 UTC m=+144.776317962 I0622 01:59:53.121811 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-06-22 01:59:53.121740439 +0000 UTC m=+144.776300822 I0622 01:59:53.134985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.135043 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-06-22 01:59:53.135036938 +0000 UTC m=+144.789597271 I0622 01:59:53.285722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.311358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-45wfl" condition "Approved" to 2026-06-22 01:59:53.311342031 +0000 UTC m=+144.965902374 I0622 01:59:53.345362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-45wfl" condition "Ready" to 2026-06-22 01:59:53.34534836 +0000 UTC m=+144.999908713 I0622 01:59:53.370293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.371581 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:53.371569527 +0000 UTC m=+145.026129900 I0622 01:59:53.391873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.392257 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:53.392251264 +0000 UTC m=+145.046811607 I0622 01:59:53.395895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.404928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cp48f" condition "Approved" to 2026-06-22 01:59:53.404912223 +0000 UTC m=+145.059472576 I0622 01:59:53.410932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.411960 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:53.411946751 +0000 UTC m=+145.066507094 I0622 01:59:53.415281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:53.420650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cp48f" condition "Ready" to 2026-06-22 01:59:53.420636391 +0000 UTC m=+145.075196724 I0622 01:59:58.120843 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:58.120829589 +0000 UTC m=+149.775389962 I0622 01:59:58.137183 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-cp48f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:58.137175007 +0000 UTC m=+149.791735360 I0622 01:59:58.169915 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:58.169891304 +0000 UTC m=+149.824451697 I0622 01:59:58.187032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:58.187568 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:59:58.187551804 +0000 UTC m=+149.842112177 I0622 01:59:58.194043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:59:58.206415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" E0622 02:00:41.760879 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out