I0725 07:40:31.450117 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0725 07:40:31.450294 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0725 07:40:31.456155 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0725 07:40:31.456192 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0725 07:40:31.456204 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0725 07:40:31.456557 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0725 07:40:31.456674 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0725 07:40:31.456819 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0725 07:40:31.459291 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0725 07:40:31.471901 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0725 07:40:31.479307 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0725 07:40:31.483515 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0725 07:40:31.485520 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0725 07:40:31.487355 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0725 07:40:31.489409 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0725 07:40:31.491167 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0725 07:40:31.495924 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0725 07:40:31.495961 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0725 07:40:31.495975 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0725 07:40:31.495987 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0725 07:40:31.496044 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0725 07:40:31.499483 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0725 07:40:31.501878 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0725 07:40:31.504242 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0725 07:40:31.506740 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0725 07:40:31.508587 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0725 07:40:31.508623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0725 07:40:31.510344 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0725 07:40:31.510363 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0725 07:40:31.515530 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0725 07:40:31.518042 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0725 07:40:31.520529 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0725 07:40:31.523475 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0725 07:40:31.527074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0725 07:40:31.528843 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.529774 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.530510 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.530719 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.531518 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.531976 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.549425 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.573182 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.588529 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.608496 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:40:31.621833 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0725 07:41:13.315744 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 07:41:13.315685706 +0000 UTC m=+41.894991727 I0725 07:41:13.315877 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 07:41:13.315974 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 07:41:13.315961832 +0000 UTC m=+41.895267853 I0725 07:41:13.454090 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 07:41:13.454071719 +0000 UTC m=+42.033377750 I0725 07:41:13.455698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:13.455811 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 07:41:13.455853 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 07:41:13.455841726 +0000 UTC m=+42.035147747 I0725 07:41:13.677336 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:13.689102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-25 07:41:13.689087228 +0000 UTC m=+42.268393229 I0725 07:41:13.726007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-25 07:41:13.725986949 +0000 UTC m=+42.305292980 I0725 07:41:13.752864 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 07:41:13.752848262 +0000 UTC m=+42.332154293 I0725 07:41:13.769575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:13.818840 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:17.350068 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 07:41:17.350051003 +0000 UTC m=+45.929357004 I0725 07:41:18.122603 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 07:41:18.122580237 +0000 UTC m=+46.701886248 I0725 07:41:18.122749 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 07:41:18.122890 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 07:41:18.122852633 +0000 UTC m=+46.702158654 E0725 07:41:18.135950 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 07:41:18.136045 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 07:41:18.136035462 +0000 UTC m=+46.715341463 E0725 07:41:18.136074 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 07:41:18.141189 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:18.141300 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 07:41:18.141363 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 07:41:18.141354954 +0000 UTC m=+46.720660955 E0725 07:41:18.149429 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0725 07:41:18.149579 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 07:41:18.149613 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 07:41:18.149676 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0725 07:41:18.170321 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:18.177328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 07:41:18.177301934 +0000 UTC m=+46.756607945 I0725 07:41:18.197932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 07:41:18.197906643 +0000 UTC m=+46.777212644 I0725 07:41:18.225774 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 07:41:18.225760001 +0000 UTC m=+46.805065982 I0725 07:41:18.237818 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:18.238127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 07:41:18.238119991 +0000 UTC m=+46.817425992 I0725 07:41:18.243744 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:18.255699 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 07:41:23.150920 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 07:41:23.150904725 +0000 UTC m=+51.730210756