I0901 04:08:20.006748       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0901 04:08:20.007355       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0901 04:08:20.007495       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0901 04:08:20.010846       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0901 04:08:20.011279       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0901 04:08:20.011595       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0901 04:08:20.011711       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0901 04:08:20.013644       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0901 04:08:20.031775       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0901 04:08:20.036082       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0901 04:08:20.044162       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0901 04:08:20.050318       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0901 04:08:20.055808       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0901 04:08:20.055857       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0901 04:08:20.055877       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0901 04:08:20.055901       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0901 04:08:20.061548       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0901 04:08:20.065913       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0901 04:08:20.068592       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0901 04:08:20.075528       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0901 04:08:20.080159       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0901 04:08:20.083434       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0901 04:08:20.086089       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0901 04:08:20.086195       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0901 04:08:20.089143       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0901 04:08:20.092084       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0901 04:08:20.094925       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0901 04:08:20.098014       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0901 04:08:20.098106       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0901 04:08:20.098069       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0901 04:08:20.101640       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0901 04:08:20.108752       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0901 04:08:20.111452       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0901 04:08:20.114318       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.114982       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.118481       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.119105       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.146665       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.168947       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.184410       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.201527       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.219721       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:20.232261       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0901 04:08:30.964377       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-01 04:08:30.964346151 +0000 UTC m=+11.012459919
I0901 04:08:31.898500       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 04:08:31.898479608 +0000 UTC m=+11.946593396
I0901 04:08:31.898727       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:08:31.898819       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-01 04:08:31.898806888 +0000 UTC m=+11.946920626
E0901 04:08:31.918904       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0901 04:08:31.918958       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-01 04:08:31.918950325 +0000 UTC m=+11.967064063
E0901 04:08:31.918977       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0901 04:08:31.925944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:08:31.926054       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 04:08:31.92604579 +0000 UTC m=+11.974159538
E0901 04:08:31.933730       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0901 04:08:31.936120       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0901 04:08:31.936454       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0901 04:08:31.939776       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0901 04:08:31.956437       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:08:31.988069       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wqwj9" condition "Approved" to 2026-09-01 04:08:31.988055883 +0000 UTC m=+12.036169621
I0901 04:08:32.005226       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wqwj9" condition "Ready" to 2026-09-01 04:08:32.005217641 +0000 UTC m=+12.053331379
I0901 04:08:32.030877       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:08:32.030867409 +0000 UTC m=+12.078981167
I0901 04:08:32.062433       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:08:36.936086       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:08:36.936062562 +0000 UTC m=+16.984176340
I0901 04:09:07.757554       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:09:07.757591       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 04:09:07.757583898 +0000 UTC m=+47.805697636
I0901 04:09:07.757722       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 04:09:07.757715402 +0000 UTC m=+47.805829160
I0901 04:09:07.769772       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-01 04:09:07.769758222 +0000 UTC m=+47.817871970
I0901 04:09:07.777309       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:09:07.777400       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 04:09:07.777392462 +0000 UTC m=+47.825506210
I0901 04:09:07.938054       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:09:07.969217       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9v7mp" condition "Approved" to 2026-09-01 04:09:07.969208131 +0000 UTC m=+48.017321869
I0901 04:09:08.002603       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9v7mp" condition "Ready" to 2026-09-01 04:09:08.002584424 +0000 UTC m=+48.050698162
I0901 04:09:08.032536       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:09:08.032523847 +0000 UTC m=+48.080637605
I0901 04:09:08.054116       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:09:08.054395       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:09:08.054388546 +0000 UTC m=+48.102502294
I0901 04:09:08.064588       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:09:08.077605       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:14:39.230911       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:14:39.231614       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-20.nip.io-tls" condition "Issuing" to 2026-09-01 04:14:39.231596676 +0000 UTC m=+379.279710454
I0901 04:14:39.230910       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-20.nip.io-tls" condition "Ready" to 2026-09-01 04:14:39.230845268 +0000 UTC m=+379.278959036
I0901 04:14:39.265649       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:14:39.265734       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:14:39.265757       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-20.nip.io-tls" condition "Issuing" to 2026-09-01 04:14:39.265749866 +0000 UTC m=+379.313863614
I0901 04:14:39.394053       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-20.nip.io-tls-rjq5l" condition "Approved" to 2026-09-01 04:14:39.394023474 +0000 UTC m=+379.442137212
I0901 04:14:39.419590       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-20.nip.io-tls-rjq5l" condition "Ready" to 2026-09-01 04:14:39.419580407 +0000 UTC m=+379.467694145
I0901 04:14:39.444569       1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-20.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:14:39.444558356 +0000 UTC m=+379.492672094
I0901 04:14:39.463358       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:18:18.256469       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:18:18.256551       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 04:18:18.256542554 +0000 UTC m=+598.304656322
I0901 04:18:18.257079       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 04:18:18.257072676 +0000 UTC m=+598.305186444
I0901 04:18:18.282595       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:18:18.282656       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 04:18:18.282649288 +0000 UTC m=+598.330763026
I0901 04:18:18.455542       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:18:18.488790       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lb688" condition "Approved" to 2026-09-01 04:18:18.488779338 +0000 UTC m=+598.536893076
I0901 04:18:18.505966       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lb688" condition "Ready" to 2026-09-01 04:18:18.505957122 +0000 UTC m=+598.554070860
I0901 04:18:18.532987       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:18:18.532975067 +0000 UTC m=+598.581088805
I0901 04:18:18.558725       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:18:18.614764       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:21:10.268772       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0901 04:21:10.268855       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-01 04:21:10.2688481 +0000 UTC m=+770.316961838
I0901 04:21:10.269419       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-01 04:21:10.269414332 +0000 UTC m=+770.317528070
I0901 04:21:10.295036       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:21:10.295127       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-01 04:21:10.295119352 +0000 UTC m=+770.343233110
I0901 04:21:10.439721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0901 04:21:10.463684       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vkt7d" condition "Approved" to 2026-09-01 04:21:10.463668773 +0000 UTC m=+770.511782511
I0901 04:21:10.479811       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vkt7d" condition "Ready" to 2026-09-01 04:21:10.479802054 +0000 UTC m=+770.527915792
I0901 04:21:10.504891       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:21:10.50487788 +0000 UTC m=+770.552991618
I0901 04:21:10.525486       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"