I0713 20:31:54.993595 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0713 20:31:54.993743 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0713 20:31:54.997247 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0713 20:31:54.997270 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0713 20:31:54.997280 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0713 20:31:54.997691 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0713 20:31:54.997781 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0713 20:31:54.997849 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0713 20:31:55.000334 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0713 20:31:55.014613 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0713 20:31:55.020894 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0713 20:31:55.023782 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0713 20:31:55.025955 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0713 20:31:55.027650 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0713 20:31:55.027675 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0713 20:31:55.027680 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0713 20:31:55.027767 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0713 20:31:55.033355 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0713 20:31:55.037198 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0713 20:31:55.039963 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0713 20:31:55.042594 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0713 20:31:55.045363 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0713 20:31:55.050294 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0713 20:31:55.054451 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0713 20:31:55.058607 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0713 20:31:55.061324 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0713 20:31:55.063102 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0713 20:31:55.063119 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0713 20:31:55.063126 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0713 20:31:55.063205 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0713 20:31:55.065125 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0713 20:31:55.066844 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0713 20:31:55.069041 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0713 20:31:55.075115 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0713 20:31:55.077773 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.078132 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.078372 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.078985 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.078994 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.079872 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.097482 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.115216 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.135398 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.157092 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:31:55.172228 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0713 20:32:05.152130 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-13 20:32:05.152102959 +0000 UTC m=+10.187544797 I0713 20:32:05.844739 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-13 20:32:05.844725173 +0000 UTC m=+10.880166981 I0713 20:32:05.844742 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 20:32:05.844987 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-13 20:32:05.84497458 +0000 UTC m=+10.880416408 E0713 20:32:05.855842 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0713 20:32:05.855931 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-13 20:32:05.855922781 +0000 UTC m=+10.891364589 E0713 20:32:05.855955 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0713 20:32:05.856915 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:05.857053 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 20:32:05.857113 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-13 20:32:05.857104414 +0000 UTC m=+10.892546242 E0713 20:32:05.865264 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0713 20:32:05.866230 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0713 20:32:05.866319 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0713 20:32:05.866384 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0713 20:32:05.895225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-13 20:32:05.895205832 +0000 UTC m=+10.930647660 I0713 20:32:05.920078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-13 20:32:05.920068386 +0000 UTC m=+10.955510224 I0713 20:32:05.942571 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:32:05.942565105 +0000 UTC m=+10.978006913 I0713 20:32:05.955168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:05.955636 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:32:05.955628424 +0000 UTC m=+10.991070252 I0713 20:32:05.971180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:10.867476 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:32:10.867461675 +0000 UTC m=+15.902903503 I0713 20:32:31.248831 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-13 20:32:31.248791791 +0000 UTC m=+36.284233599 I0713 20:32:31.249266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 20:32:31.249387 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-13 20:32:31.249376427 +0000 UTC m=+36.284818235 I0713 20:32:31.253438 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-13 20:32:31.253428819 +0000 UTC m=+36.288870627 I0713 20:32:31.264082 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:31.264190 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-13 20:32:31.264178524 +0000 UTC m=+36.299620342 I0713 20:32:31.358175 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:31.388430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-13 20:32:31.388411102 +0000 UTC m=+36.423852940 I0713 20:32:31.420980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-13 20:32:31.420963347 +0000 UTC m=+36.456405185 I0713 20:32:31.447052 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:32:31.447035845 +0000 UTC m=+36.482477683 I0713 20:32:31.462286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:31.463160 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:32:31.463149728 +0000 UTC m=+36.498591566 I0713 20:32:31.468734 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:32:31.476277 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.195291 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 20:34:16.195285 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Ready" to 2026-07-13 20:34:16.194601853 +0000 UTC m=+141.230043691 I0713 20:34:16.195388 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Issuing" to 2026-07-13 20:34:16.195351243 +0000 UTC m=+141.230793041 I0713 20:34:16.197523 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-client" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0713 20:34:16.197545 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Issuing" to 2026-07-13 20:34:16.197541933 +0000 UTC m=+141.232983731 I0713 20:34:16.197977 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Ready" to 2026-07-13 20:34:16.197971204 +0000 UTC m=+141.233413002 I0713 20:34:16.203871 1 conditions.go:96] Setting lastTransitionTime for Issuer "cloudnative-pg-barman-cloud-selfsigned-issuer" condition "Ready" to 2026-07-13 20:34:16.203854654 +0000 UTC m=+141.239296492 I0713 20:34:16.210741 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.210823 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Ready" to 2026-07-13 20:34:16.210803693 +0000 UTC m=+141.246245491 I0713 20:34:16.212493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.212626 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Ready" to 2026-07-13 20:34:16.212614782 +0000 UTC m=+141.248056570 I0713 20:34:16.366585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.407245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Approved" to 2026-07-13 20:34:16.407219441 +0000 UTC m=+141.442661269 I0713 20:34:16.427716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Ready" to 2026-07-13 20:34:16.427694187 +0000 UTC m=+141.463136025 I0713 20:34:16.451280 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:34:16.451268758 +0000 UTC m=+141.486710596 I0713 20:34:16.465826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.466745 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:34:16.466734328 +0000 UTC m=+141.502176166 I0713 20:34:16.480298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.485046 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.668891 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.699567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Approved" to 2026-07-13 20:34:16.699552055 +0000 UTC m=+141.734993863 I0713 20:34:16.715642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Ready" to 2026-07-13 20:34:16.715628482 +0000 UTC m=+141.751070290 I0713 20:34:16.742211 1 conditions.go:192] Found status change for Certificate "barman-cloud-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:34:16.742196984 +0000 UTC m=+141.777638792 I0713 20:34:16.753921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0713 20:34:16.754884 1 conditions.go:192] Found status change for Certificate "barman-cloud-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-13 20:34:16.754871528 +0000 UTC m=+141.790313366 I0713 20:34:16.768855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again"