I0413 04:01:39.694762       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0413 04:01:39.694838       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0413 04:01:39.694890       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0413 04:01:39.699564       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0413 04:01:39.700149       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0413 04:01:39.700484       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0413 04:01:39.700590       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0413 04:01:39.704512       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0413 04:01:39.720233       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0413 04:01:39.724399       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0413 04:01:39.726768       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0413 04:01:39.726792       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0413 04:01:39.726800       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0413 04:01:39.726913       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0413 04:01:39.729601       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0413 04:01:39.733972       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0413 04:01:39.737270       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0413 04:01:39.739618       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0413 04:01:39.741844       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0413 04:01:39.744314       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0413 04:01:39.746705       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0413 04:01:39.748826       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0413 04:01:39.750566       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0413 04:01:39.754040       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0413 04:01:39.756974       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0413 04:01:39.759422       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0413 04:01:39.761663       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0413 04:01:39.764213       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0413 04:01:39.765725       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0413 04:01:39.765764       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0413 04:01:39.765783       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0413 04:01:39.765800       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0413 04:01:39.768093       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0413 04:01:39.771451       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.771751       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.772145       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.774660       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.794010       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.809671       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.827080       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.842623       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.856360       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:39.873644       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0413 04:01:57.721119       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 04:01:57.72110395 +0000 UTC m=+18.052826279
I0413 04:01:58.264175       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 04:01:58.264162166 +0000 UTC m=+18.595884505
I0413 04:01:58.264851       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.264876       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 04:01:58.264870476 +0000 UTC m=+18.596592795
E0413 04:01:58.286641       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0413 04:01:58.286697       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 04:01:58.286690212 +0000 UTC m=+18.618412521
I0413 04:01:58.286715       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0413 04:01:58.287494       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.287534       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.287550       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 04:01:58.287546556 +0000 UTC m=+18.619268865
E0413 04:01:58.300044       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0413 04:01:58.300115       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0413 04:01:58.300131       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0413 04:01:58.300170       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0413 04:01:58.306060       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 04:01:58.30605073 +0000 UTC m=+18.637773029
I0413 04:01:58.306314       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.306335       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 04:01:58.306330454 +0000 UTC m=+18.638052763
I0413 04:01:58.327209       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.327334       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.327389       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 04:01:58.327379999 +0000 UTC m=+18.659102308
I0413 04:01:58.371034       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 04:01:58.371023059 +0000 UTC m=+18.702745368
I0413 04:01:58.371358       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.371372       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 04:01:58.371368074 +0000 UTC m=+18.703090383
E0413 04:01:58.385319       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0413 04:01:58.385421       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 04:01:58.38541446 +0000 UTC m=+18.717136769
E0413 04:01:58.385460       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0413 04:01:58.391500       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.391599       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0413 04:01:58.391807       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 04:01:58.391800259 +0000 UTC m=+18.723522588
E0413 04:01:58.394288       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0413 04:01:58.395120       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0413 04:01:58.395157       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0413 04:01:58.399538       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0413 04:01:58.452508       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sxrsp" condition "Approved" to 2026-04-13 04:01:58.452498022 +0000 UTC m=+18.784220321
I0413 04:01:58.464806       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sxrsp" condition "Ready" to 2026-04-13 04:01:58.464799492 +0000 UTC m=+18.796521791
I0413 04:01:58.484831       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:01:58.48482429 +0000 UTC m=+18.816546599
I0413 04:01:58.498896       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.545783       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.595789       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9z9tr" condition "Approved" to 2026-04-13 04:01:58.595779047 +0000 UTC m=+18.927501356
I0413 04:01:58.632058       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9z9tr" condition "Ready" to 2026-04-13 04:01:58.632045815 +0000 UTC m=+18.963768134
I0413 04:01:58.783956       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:01:58.783949192 +0000 UTC m=+19.115671491
I0413 04:01:58.882744       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:58.883191       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:01:58.883183848 +0000 UTC m=+19.214906147
I0413 04:01:59.122586       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:59.335265       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:01:59.428149       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5z95l" condition "Approved" to 2026-04-13 04:01:59.428140849 +0000 UTC m=+19.759863148
I0413 04:01:59.541469       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5z95l" condition "Ready" to 2026-04-13 04:01:59.541455103 +0000 UTC m=+19.873177402
I0413 04:02:03.301596       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.301557083 +0000 UTC m=+23.633279412
I0413 04:02:03.327987       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5z95l" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.3279757 +0000 UTC m=+23.659698009
I0413 04:02:03.356611       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.35659743 +0000 UTC m=+23.688319739
I0413 04:02:03.378295       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:02:03.379192       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.379180159 +0000 UTC m=+23.710902468
I0413 04:02:03.381364       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:02:03.392028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:02:03.392346       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.392338827 +0000 UTC m=+23.724061136
I0413 04:02:03.395772       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0413 04:02:03.396043       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 04:02:03.396028752 +0000 UTC m=+23.727751061