I0730 21:10:44.669365       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0730 21:10:44.669553       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0730 21:10:44.673263       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0730 21:10:44.673289       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0730 21:10:44.673298       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0730 21:10:44.673784       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0730 21:10:44.673907       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0730 21:10:44.673967       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0730 21:10:44.680103       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0730 21:10:44.697579       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0730 21:10:44.703010       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0730 21:10:44.707251       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0730 21:10:44.710180       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0730 21:10:44.714986       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0730 21:10:44.718855       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0730 21:10:44.718903       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0730 21:10:44.722825       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0730 21:10:44.724770       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0730 21:10:44.726546       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0730 21:10:44.726696       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0730 21:10:44.728649       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0730 21:10:44.733583       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0730 21:10:44.737951       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0730 21:10:44.738014       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0730 21:10:44.740688       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0730 21:10:44.740785       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0730 21:10:44.743522       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0730 21:10:44.745974       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0730 21:10:44.745993       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0730 21:10:44.746095       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0730 21:10:44.748700       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0730 21:10:44.751257       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0730 21:10:44.752962       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0730 21:10:44.755094       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0730 21:10:44.760151       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.760152       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.760573       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.761126       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.761177       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.777536       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.800853       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.823423       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.842447       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.860147       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:10:44.883486       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 21:11:00.172315       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-30 21:11:00.172286494 +0000 UTC m=+15.529653928
I0730 21:11:00.946853       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-30 21:11:00.946831072 +0000 UTC m=+16.304198526
I0730 21:11:00.947002       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:11:00.947091       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 21:11:00.947078336 +0000 UTC m=+16.304445770
E0730 21:11:00.960253       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0730 21:11:00.960370       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-30 21:11:00.96036171 +0000 UTC m=+16.317729144
E0730 21:11:00.960393       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0730 21:11:00.961728       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:00.961966       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:11:00.962008       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 21:11:00.962000591 +0000 UTC m=+16.319368055
E0730 21:11:00.968407       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0730 21:11:00.968633       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 21:11:00.968786       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 21:11:00.968918       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0730 21:11:00.991633       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:01.004934       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-30 21:11:01.004899478 +0000 UTC m=+16.362266942
I0730 21:11:01.029065       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-30 21:11:01.029054298 +0000 UTC m=+16.386421752
I0730 21:11:01.057437       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:11:01.057414578 +0000 UTC m=+16.414782002
I0730 21:11:01.071447       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:01.072034       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:11:01.072021716 +0000 UTC m=+16.429389180
I0730 21:11:01.086800       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:05.968916       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:11:05.968895185 +0000 UTC m=+21.326262639
I0730 21:11:27.221679       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-30 21:11:27.221658141 +0000 UTC m=+42.579025575
I0730 21:11:27.221909       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:11:27.222021       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 21:11:27.222008758 +0000 UTC m=+42.579376192
I0730 21:11:27.241926       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-30 21:11:27.241910876 +0000 UTC m=+42.599278310
I0730 21:11:27.246850       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:27.246914       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:11:27.246937       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 21:11:27.246928572 +0000 UTC m=+42.604295996
I0730 21:11:27.639515       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:27.656252       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-30 21:11:27.656233005 +0000 UTC m=+43.013600439
I0730 21:11:27.689254       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-30 21:11:27.689232383 +0000 UTC m=+43.046599847
I0730 21:11:27.717504       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:11:27.717484922 +0000 UTC m=+43.074852376
I0730 21:11:27.736021       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:27.736524       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:11:27.736516413 +0000 UTC m=+43.093883827
I0730 21:11:27.749433       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:11:27.754049       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:21:53.575511       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-30 21:21:53.575494789 +0000 UTC m=+668.932862233
I0730 21:21:53.575630       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:21:53.575695       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-07-30 21:21:53.575685903 +0000 UTC m=+668.933053337
I0730 21:21:53.589831       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:21:53.590019       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-30 21:21:53.590002527 +0000 UTC m=+668.947369991
I0730 21:21:53.706753       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:21:53.742969       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-1" condition "Approved" to 2026-07-30 21:21:53.742946425 +0000 UTC m=+669.100313889
I0730 21:21:53.765027       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-1" condition "Ready" to 2026-07-30 21:21:53.765008428 +0000 UTC m=+669.122375882
I0730 21:21:53.791596       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:21:53.791573847 +0000 UTC m=+669.148941281
I0730 21:21:53.809443       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:21:53.810308       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:21:53.810292995 +0000 UTC m=+669.167660449
I0730 21:21:53.817169       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:21:53.825551       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:25:47.706282       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:25:47.706363       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 21:25:47.706350719 +0000 UTC m=+903.063718183
I0730 21:25:47.706338       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-30 21:25:47.706306289 +0000 UTC m=+903.063673723
I0730 21:25:47.718918       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:25:47.719025       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 21:25:47.719064       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 21:25:47.719054943 +0000 UTC m=+903.076422377
I0730 21:25:47.932569       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:25:47.949643       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-30 21:25:47.949624463 +0000 UTC m=+903.306991917
I0730 21:25:47.965873       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-30 21:25:47.965859284 +0000 UTC m=+903.323226708
I0730 21:25:47.989529       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:25:47.989514176 +0000 UTC m=+903.346881630
I0730 21:25:48.005086       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:25:48.007234       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:25:48.007226395 +0000 UTC m=+903.364593859
I0730 21:25:48.018917       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 21:25:48.025197       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"