I0714 06:40:29.397699 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 06:40:29.397878 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 06:40:29.402943 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 06:40:29.402978 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0714 06:40:29.402993 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0714 06:40:29.403521 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0714 06:40:29.403544 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 06:40:29.403604 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 06:40:29.407486 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 06:40:29.418546 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 06:40:29.422999 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 06:40:29.425228 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 06:40:29.427188 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 06:40:29.428921 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 06:40:29.429030 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 06:40:29.433233 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 06:40:29.435873 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 06:40:29.435894 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 06:40:29.435902 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 06:40:29.436102 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 06:40:29.438740 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 06:40:29.441031 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0714 06:40:29.443502 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 06:40:29.445924 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 06:40:29.450609 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 06:40:29.453554 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 06:40:29.455892 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 06:40:29.455913 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 06:40:29.456075 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 06:40:29.462881 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 06:40:29.466848 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 06:40:29.470821 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 06:40:29.474562 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 06:40:29.478474 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 06:40:29.479811 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.482096 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.482394 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.482480 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.482670 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.483954 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.529557 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.544885 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.562730 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.580197 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:29.599347 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 06:40:44.610926 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 06:40:44.610879399 +0000 UTC m=+15.236026937 I0714 06:40:45.284191 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 06:40:45.284169819 +0000 UTC m=+15.909317367 I0714 06:40:45.284344 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:40:45.284412 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 06:40:45.284402474 +0000 UTC m=+15.909550022 E0714 06:40:45.296365 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 06:40:45.296421 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 06:40:45.296413062 +0000 UTC m=+15.921560580 E0714 06:40:45.296468 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 06:40:45.300917 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:45.302130 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:40:45.302170 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 06:40:45.302157185 +0000 UTC m=+15.927304723 E0714 06:40:45.311466 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0714 06:40:45.311799 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 06:40:45.311869 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 06:40:45.311902 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0714 06:40:45.336373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:45.349995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-14 06:40:45.349975043 +0000 UTC m=+15.975122581 I0714 06:40:45.372220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-14 06:40:45.372204475 +0000 UTC m=+15.997352023 I0714 06:40:45.410977 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:40:45.410965353 +0000 UTC m=+16.036112861 I0714 06:40:45.426143 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:45.426425 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:40:45.42641956 +0000 UTC m=+16.051567068 I0714 06:40:45.435960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:45.436531 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:40:50.312603 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:40:50.31258941 +0000 UTC m=+20.937736958 I0714 06:41:10.068780 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:41:10.068828 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 06:41:10.068822525 +0000 UTC m=+40.693970033 I0714 06:41:10.069178 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 06:41:10.069168562 +0000 UTC m=+40.694316060 I0714 06:41:10.079984 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 06:41:10.079972277 +0000 UTC m=+40.705119795 I0714 06:41:10.080462 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:10.080516 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:41:10.080538 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 06:41:10.080533448 +0000 UTC m=+40.705680966 I0714 06:41:10.359315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:10.372249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-14 06:41:10.372232913 +0000 UTC m=+40.997380451 I0714 06:41:10.400432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-14 06:41:10.400420152 +0000 UTC m=+41.025567670 I0714 06:41:10.425689 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:41:10.425679333 +0000 UTC m=+41.050826851 I0714 06:41:10.439807 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:10.440964 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:41:10.440950215 +0000 UTC m=+41.066097753 I0714 06:41:10.452080 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:41:10.455336 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:08.797682 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:08.797825 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Issuing" to 2026-07-14 06:43:08.797794315 +0000 UTC m=+159.422941863 I0714 06:43:08.798408 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Ready" to 2026-07-14 06:43:08.797682273 +0000 UTC m=+159.422829801 I0714 06:43:08.799752 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barman-cloud-client" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 06:43:08.799798 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Issuing" to 2026-07-14 06:43:08.799789514 +0000 UTC m=+159.424937062 I0714 06:43:08.799773 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Ready" to 2026-07-14 06:43:08.799766304 +0000 UTC m=+159.424913822 I0714 06:43:08.810364 1 conditions.go:96] Setting lastTransitionTime for Issuer "cloudnative-pg-barman-cloud-selfsigned-issuer" condition "Ready" to 2026-07-14 06:43:08.810347917 +0000 UTC m=+159.435495425 I0714 06:43:08.815112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:08.815297 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-server" condition "Ready" to 2026-07-14 06:43:08.815284733 +0000 UTC m=+159.440432251 I0714 06:43:08.816071 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:08.816155 1 conditions.go:203] Setting lastTransitionTime for Certificate "barman-cloud-client" condition "Ready" to 2026-07-14 06:43:08.816147989 +0000 UTC m=+159.441295527 I0714 06:43:08.940976 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:08.976543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Approved" to 2026-07-14 06:43:08.97652683 +0000 UTC m=+159.601674378 I0714 06:43:08.994000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-client-1" condition "Ready" to 2026-07-14 06:43:08.993992067 +0000 UTC m=+159.619139585 I0714 06:43:09.019547 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:09.01953434 +0000 UTC m=+159.644681888 I0714 06:43:09.033013 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:09.034613 1 conditions.go:192] Found status change for Certificate "barman-cloud-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:09.034588411 +0000 UTC m=+159.659735949 I0714 06:43:09.040954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:09.046129 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-client" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-client\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:09.133722 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again" I0714 06:43:09.157337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Approved" to 2026-07-14 06:43:09.157321853 +0000 UTC m=+159.782469401 I0714 06:43:09.172966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barman-cloud-server-1" condition "Ready" to 2026-07-14 06:43:09.172947445 +0000 UTC m=+159.798094993 I0714 06:43:09.196216 1 conditions.go:192] Found status change for Certificate "barman-cloud-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 06:43:09.196203435 +0000 UTC m=+159.821350953 I0714 06:43:09.218199 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barman-cloud-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barman-cloud-server\": the object has been modified; please apply your changes to the latest version and try again"