I0730 23:06:30.620676       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0730 23:06:30.620940       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0730 23:06:30.625458       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0730 23:06:30.625483       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0730 23:06:30.625492       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0730 23:06:30.625891       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0730 23:06:30.625959       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0730 23:06:30.626016       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0730 23:06:30.628456       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0730 23:06:30.645463       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0730 23:06:30.651418       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0730 23:06:30.651502       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0730 23:06:30.654127       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0730 23:06:30.656492       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0730 23:06:30.658333       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0730 23:06:30.662199       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0730 23:06:30.662221       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0730 23:06:30.662443       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0730 23:06:30.664973       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0730 23:06:30.667523       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0730 23:06:30.670011       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0730 23:06:30.670210       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0730 23:06:30.672603       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0730 23:06:30.675205       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0730 23:06:30.680772       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0730 23:06:30.683425       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0730 23:06:30.686013       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0730 23:06:30.688585       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0730 23:06:30.688611       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0730 23:06:30.688761       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0730 23:06:30.690687       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0730 23:06:30.692618       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0730 23:06:30.694442       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0730 23:06:30.696367       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0730 23:06:30.702317       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.702450       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.702485       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.702661       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.702880       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.703459       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.718105       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.738144       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.756703       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.779143       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:30.796535       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0730 23:06:50.228262       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-30 23:06:50.228238944 +0000 UTC m=+19.632735986
I0730 23:06:50.953431       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:06:50.953418       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-30 23:06:50.953402273 +0000 UTC m=+20.357899315
I0730 23:06:50.953490       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 23:06:50.953478425 +0000 UTC m=+20.357975467
I0730 23:06:50.964069       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:06:50.964157       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-30 23:06:50.964145663 +0000 UTC m=+20.368642715
E0730 23:06:50.967493       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0730 23:06:50.967598       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-30 23:06:50.967589366 +0000 UTC m=+20.372086408
E0730 23:06:50.967624       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 23:06:50.974792       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0730 23:06:50.974887       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 23:06:50.974908       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0730 23:06:50.975144       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0730 23:06:50.977315       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:06:51.010423       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-30 23:06:51.010408842 +0000 UTC m=+20.414905864
I0730 23:06:51.030717       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-30 23:06:51.03070282 +0000 UTC m=+20.435199872
I0730 23:06:51.053329       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:06:51.05331565 +0000 UTC m=+20.457812672
I0730 23:06:51.068810       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:06:51.069204       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:06:51.069194479 +0000 UTC m=+20.473691521
I0730 23:06:51.074750       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:06:51.082983       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:06:55.975304       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:06:55.975284476 +0000 UTC m=+25.379781518
I0730 23:07:18.404671       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-30 23:07:18.404650963 +0000 UTC m=+47.809147985
I0730 23:07:18.405352       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:07:18.405433       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 23:07:18.405424814 +0000 UTC m=+47.809921836
I0730 23:07:18.419287       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:07:18.419558       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:07:18.419678       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 23:07:18.419660918 +0000 UTC m=+47.824157970
I0730 23:07:18.420864       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-30 23:07:18.42085213 +0000 UTC m=+47.825349152
I0730 23:07:18.886646       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:07:18.896904       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-30 23:07:18.896892443 +0000 UTC m=+48.301389475
I0730 23:07:18.924562       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-30 23:07:18.92455078 +0000 UTC m=+48.329047802
I0730 23:07:18.961530       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:07:18.961516088 +0000 UTC m=+48.366013140
I0730 23:07:18.976712       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:07:19.023220       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:18:23.066892       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-07-30 23:18:23.066878725 +0000 UTC m=+712.471375747
I0730 23:18:23.067172       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:18:23.067285       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-07-30 23:18:23.067273406 +0000 UTC m=+712.471770448
I0730 23:18:23.081242       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:18:23.081689       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:18:23.081740       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-07-30 23:18:23.081727995 +0000 UTC m=+712.486225037
I0730 23:18:23.262410       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:18:23.285225       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-1" condition "Approved" to 2026-07-30 23:18:23.285200077 +0000 UTC m=+712.689697119
I0730 23:18:23.303859       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-1" condition "Ready" to 2026-07-30 23:18:23.30384421 +0000 UTC m=+712.708341232
I0730 23:18:23.332920       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:18:23.332901815 +0000 UTC m=+712.737398857
I0730 23:18:23.349452       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:18:23.350275       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:18:23.350268064 +0000 UTC m=+712.754765106
I0730 23:18:23.370722       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:22:18.222826       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0730 23:22:18.222935       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 23:22:18.222898587 +0000 UTC m=+947.627395629
I0730 23:22:18.223211       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-30 23:22:18.223187704 +0000 UTC m=+947.627684806
I0730 23:22:18.237835       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:22:18.237958       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-30 23:22:18.237944843 +0000 UTC m=+947.642441885
I0730 23:22:18.441088       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:22:18.488155       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-30 23:22:18.488139289 +0000 UTC m=+947.892636311
I0730 23:22:18.517824       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-30 23:22:18.51781251 +0000 UTC m=+947.922309522
I0730 23:22:18.548796       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:22:18.548782257 +0000 UTC m=+947.953279279
I0730 23:22:18.563180       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0730 23:22:18.563978       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 23:22:18.563969037 +0000 UTC m=+947.968466089
I0730 23:22:18.575665       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"