I0219 02:28:47.806385 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0219 02:28:47.806528 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0219 02:28:47.806620 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0219 02:28:47.810518 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0219 02:28:47.810958 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0219 02:28:47.811068 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0219 02:28:47.811210 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0219 02:28:47.813477 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0219 02:28:47.829057 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0219 02:28:47.834451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0219 02:28:47.840979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0219 02:28:47.845107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0219 02:28:47.848233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0219 02:28:47.850304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0219 02:28:47.852421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0219 02:28:47.854408 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0219 02:28:47.854503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0219 02:28:47.860156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0219 02:28:47.864560 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0219 02:28:47.864610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0219 02:28:47.868028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0219 02:28:47.869806 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0219 02:28:47.869833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0219 02:28:47.869931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0219 02:28:47.871898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0219 02:28:47.873767 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0219 02:28:47.873947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0219 02:28:47.875996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0219 02:28:47.878004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0219 02:28:47.884542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0219 02:28:47.889069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0219 02:28:47.889121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0219 02:28:47.892542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0219 02:28:47.896394 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.896725 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.896992 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.897414 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.897563 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.897562 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.899060 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.899571 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.899942 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:28:47.932718 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0219 02:29:05.513618 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-02-19 02:29:05.513595597 +0000 UTC m=+17.742913027 I0219 02:29:06.235662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0219 02:29:06.235757 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-19 02:29:06.235745453 +0000 UTC m=+18.465062903 I0219 02:29:06.235933 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-19 02:29:06.235909957 +0000 UTC m=+18.465227387 E0219 02:29:06.253142 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0219 02:29:06.253213 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-02-19 02:29:06.253206168 +0000 UTC m=+18.482523558 E0219 02:29:06.253237 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0219 02:29:06.256941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:06.257033 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-19 02:29:06.257024275 +0000 UTC m=+18.486341685 E0219 02:29:06.267804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0219 02:29:06.267897 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0219 02:29:06.267921 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0219 02:29:06.267957 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0219 02:29:06.271023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:06.271113 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-19 02:29:06.271101604 +0000 UTC m=+18.500419014 I0219 02:29:06.282864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zvt9p" condition "Approved" to 2026-02-19 02:29:06.282850489 +0000 UTC m=+18.512167889 I0219 02:29:06.294412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zvt9p" condition "Ready" to 2026-02-19 02:29:06.294398921 +0000 UTC m=+18.523716321 I0219 02:29:06.325087 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:29:06.325071055 +0000 UTC m=+18.554388475 I0219 02:29:06.351014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:06.400061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:11.268714 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:29:11.26869599 +0000 UTC m=+23.498013420 I0219 02:29:36.091805 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-19 02:29:36.091777082 +0000 UTC m=+48.321094512 I0219 02:29:36.091859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0219 02:29:36.091975 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-19 02:29:36.091963376 +0000 UTC m=+48.321280776 I0219 02:29:36.104078 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-02-19 02:29:36.10406109 +0000 UTC m=+48.333378490 I0219 02:29:36.155316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:36.155442 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-19 02:29:36.155431612 +0000 UTC m=+48.384749012 I0219 02:29:36.321543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:36.486229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gwv7t" condition "Approved" to 2026-02-19 02:29:36.486218689 +0000 UTC m=+48.715536089 I0219 02:29:36.545967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gwv7t" condition "Ready" to 2026-02-19 02:29:36.545952942 +0000 UTC m=+48.775270362 I0219 02:29:36.690187 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:29:36.690173906 +0000 UTC m=+48.919491306 I0219 02:29:36.756090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:29:36.872419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.459363 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-02-19 02:31:46.459327936 +0000 UTC m=+178.688645366 I0219 02:31:46.459987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0219 02:31:46.460019 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-02-19 02:31:46.460012111 +0000 UTC m=+178.689329541 E0219 02:31:46.477457 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0219 02:31:46.477517 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-02-19 02:31:46.477505385 +0000 UTC m=+178.706822785 I0219 02:31:46.477571 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0219 02:31:46.480112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.480339 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-02-19 02:31:46.48032612 +0000 UTC m=+178.709643550 E0219 02:31:46.487781 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0219 02:31:46.488000 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0219 02:31:46.488073 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0219 02:31:46.488136 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0219 02:31:46.494444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0219 02:31:46.494499 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-02-19 02:31:46.494488237 +0000 UTC m=+178.723805657 I0219 02:31:46.494499 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-02-19 02:31:46.494483817 +0000 UTC m=+178.723801257 I0219 02:31:46.510200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.510367 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-02-19 02:31:46.510352193 +0000 UTC m=+178.739669633 I0219 02:31:46.653877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.685185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m8szd" condition "Approved" to 2026-02-19 02:31:46.685167878 +0000 UTC m=+178.914485298 I0219 02:31:46.719025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m8szd" condition "Ready" to 2026-02-19 02:31:46.71901279 +0000 UTC m=+178.948330190 I0219 02:31:46.751685 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:46.751675984 +0000 UTC m=+178.980993374 I0219 02:31:46.773974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.831706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.887481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:46.917914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-q79qv" condition "Approved" to 2026-02-19 02:31:46.917902791 +0000 UTC m=+179.147220171 I0219 02:31:46.936751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-q79qv" condition "Ready" to 2026-02-19 02:31:46.936729656 +0000 UTC m=+179.166047086 I0219 02:31:51.488780 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:51.488747382 +0000 UTC m=+183.718064812 I0219 02:31:51.507655 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-q79qv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:51.507638869 +0000 UTC m=+183.736956269 I0219 02:31:51.543856 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:51.543840334 +0000 UTC m=+183.773157734 I0219 02:31:51.571339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:51.572738 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:51.572729891 +0000 UTC m=+183.802047291 I0219 02:31:51.578371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:51.592432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0219 02:31:51.593045 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-19 02:31:51.593032132 +0000 UTC m=+183.822349562