I0821 02:29:36.333227 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0821 02:29:36.333355 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0821 02:29:36.333514 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0821 02:29:36.339309 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0821 02:29:36.339807 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0821 02:29:36.339921 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0821 02:29:36.339933 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0821 02:29:36.342665 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0821 02:29:36.356981 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0821 02:29:36.357235 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0821 02:29:36.357273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0821 02:29:36.357302 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0821 02:29:36.357334 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0821 02:29:36.363575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0821 02:29:36.367316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0821 02:29:36.375922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0821 02:29:36.378093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0821 02:29:36.379837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0821 02:29:36.381648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0821 02:29:36.383597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0821 02:29:36.385380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0821 02:29:36.387266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0821 02:29:36.391744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0821 02:29:36.394574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0821 02:29:36.397189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0821 02:29:36.399706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0821 02:29:36.402058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0821 02:29:36.404047 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0821 02:29:36.404167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0821 02:29:36.406766 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0821 02:29:36.406823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0821 02:29:36.409712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0821 02:29:36.412749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0821 02:29:36.417268 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.420760 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.420861 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.433414 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.446398 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.462493 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.481311 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.502596 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.511691 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:36.519527 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:49.357884 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-21 02:29:49.357848001 +0000 UTC m=+13.054559281 I0821 02:29:50.102272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:29:50.102336 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-21 02:29:50.102323522 +0000 UTC m=+13.799034812 I0821 02:29:50.102503 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:29:50.102491367 +0000 UTC m=+13.799202657 E0821 02:29:50.121841 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:29:50.121910 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-21 02:29:50.121902321 +0000 UTC m=+13.818613591 E0821 02:29:50.121939 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:29:50.129538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:29:50.130006 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:29:50.129993215 +0000 UTC m=+13.826704505 E0821 02:29:50.141234 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0821 02:29:50.141445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:29:50.141513 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:29:50.141504161 +0000 UTC m=+13.838215411 E0821 02:29:50.141783 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:29:50.141813 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:29:50.141842 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0821 02:29:50.144887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:29:50.145446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wrhmm" condition "Approved" to 2026-08-21 02:29:50.14541807 +0000 UTC m=+13.842129320 I0821 02:29:50.156891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wrhmm" condition "Ready" to 2026-08-21 02:29:50.156881725 +0000 UTC m=+13.853592975 I0821 02:29:50.178268 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:29:50.178250327 +0000 UTC m=+13.874961587 I0821 02:29:50.194743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:29:50.195063 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:29:50.195055863 +0000 UTC m=+13.891767123 I0821 02:29:50.211931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:29:55.141848 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:29:55.141837825 +0000 UTC m=+18.838549085 I0821 02:30:17.770826 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-21 02:30:17.770765904 +0000 UTC m=+41.467477194 I0821 02:30:17.771432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:17.771504 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:30:17.771495417 +0000 UTC m=+41.468206677 I0821 02:30:17.796251 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-21 02:30:17.796235817 +0000 UTC m=+41.492947077 I0821 02:30:17.810360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:17.810425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:17.810444 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:30:17.810439289 +0000 UTC m=+41.507150539 I0821 02:30:17.971518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rjb4w" condition "Approved" to 2026-08-21 02:30:17.971507853 +0000 UTC m=+41.668219103 I0821 02:30:18.003374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rjb4w" condition "Ready" to 2026-08-21 02:30:18.003363335 +0000 UTC m=+41.700074605 I0821 02:30:18.038647 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:18.038636364 +0000 UTC m=+41.735347624 I0821 02:30:18.062629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:18.062886 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:18.06288047 +0000 UTC m=+41.759591730 I0821 02:30:18.085712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" E0821 02:35:04.330065 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0821 02:35:31.607115 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0821 02:35:31.607198 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0821 02:35:38.613034 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0821 02:35:38.613194 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0821 02:35:38.613666 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0821 02:35:38.613690 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0821 02:35:38.613844 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0821 02:35:38.613898 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0821 02:35:38.614005 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0821 02:35:38.614117 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0821 02:35:38.614148 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0821 02:35:38.614196 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0821 02:35:38.614215 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0821 02:35:38.614227 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0821 02:35:38.614240 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0821 02:35:38.614253 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0821 02:35:38.614279 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0821 02:35:38.614299 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0821 02:35:38.614357 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0821 02:35:38.614321 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0821 02:35:38.614357 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" E0821 02:35:38.614824 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"