I0725 10:39:33.241876       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0725 10:39:33.242267       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0725 10:39:33.249681       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0725 10:39:33.249760       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0725 10:39:33.249782       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0725 10:39:33.250556       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0725 10:39:33.250597       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0725 10:39:33.250611       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0725 10:39:33.254433       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0725 10:39:33.266952       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0725 10:39:33.273030       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0725 10:39:33.275041       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0725 10:39:33.275069       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0725 10:39:33.275085       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0725 10:39:33.276548       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0725 10:39:33.278117       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0725 10:39:33.278190       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0725 10:39:33.281659       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0725 10:39:33.287790       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0725 10:39:33.291497       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0725 10:39:33.295168       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0725 10:39:33.297491       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0725 10:39:33.297583       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0725 10:39:33.299811       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0725 10:39:33.304211       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0725 10:39:33.308997       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0725 10:39:33.312333       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0725 10:39:33.315387       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0725 10:39:33.318351       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0725 10:39:33.321810       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0725 10:39:33.324327       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0725 10:39:33.324625       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0725 10:39:33.326788       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0725 10:39:33.330751       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0725 10:39:33.332996       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.333226       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.333348       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.333742       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.333967       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.353654       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.369014       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.389470       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.408458       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.424264       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:33.446485       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 10:39:48.482775       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 10:39:48.482738623 +0000 UTC m=+15.269927491
I0725 10:39:49.264622       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:39:49.264638       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 10:39:49.26462577 +0000 UTC m=+16.051814648
I0725 10:39:49.264695       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 10:39:49.264686331 +0000 UTC m=+16.051875209
E0725 10:39:49.270851       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 10:39:49.270920       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 10:39:49.270909104 +0000 UTC m=+16.058098002
E0725 10:39:49.271362       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 10:39:49.284139       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:49.284215       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:39:49.284237       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 10:39:49.284229832 +0000 UTC m=+16.071418700
E0725 10:39:49.284737       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0725 10:39:49.284812       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 10:39:49.284842       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 10:39:49.284873       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0725 10:39:49.318637       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:49.329446       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 10:39:49.329432354 +0000 UTC m=+16.116621222
I0725 10:39:49.359624       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 10:39:49.359613417 +0000 UTC m=+16.146802285
I0725 10:39:49.394430       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:39:49.394402183 +0000 UTC m=+16.181591061
I0725 10:39:49.408060       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:49.408708       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:39:49.408702075 +0000 UTC m=+16.195890953
I0725 10:39:49.423892       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:54.260308       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:39:54.260385       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 10:39:54.260375441 +0000 UTC m=+21.047564349
I0725 10:39:54.260699       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 10:39:54.26068398 +0000 UTC m=+21.047872858
I0725 10:39:54.281110       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:54.281492       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 10:39:54.281481791 +0000 UTC m=+21.068670669
I0725 10:39:54.282271       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 10:39:54.28226546 +0000 UTC m=+21.069454338
I0725 10:39:54.300772       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:39:54.300763796 +0000 UTC m=+21.087952664
I0725 10:39:54.653112       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:54.695918       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-25 10:39:54.695906347 +0000 UTC m=+21.483095225
I0725 10:39:54.718093       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-25 10:39:54.718083733 +0000 UTC m=+21.505272601
I0725 10:39:54.744958       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:39:54.744946773 +0000 UTC m=+21.532135651
I0725 10:39:54.766560       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:54.767060       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:39:54.767052838 +0000 UTC m=+21.554241716
I0725 10:39:54.773414       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:39:54.786342       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:44:06.417915       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:44:06.417990       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-07-25 10:44:06.417955272 +0000 UTC m=+273.205144140
I0725 10:44:06.417994       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-07-25 10:44:06.417980463 +0000 UTC m=+273.205169341
I0725 10:44:06.428212       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:44:06.428287       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:44:06.428307       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-07-25 10:44:06.428299815 +0000 UTC m=+273.215488703
I0725 10:44:06.557767       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:44:06.575051       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-1" condition "Approved" to 2026-07-25 10:44:06.575033569 +0000 UTC m=+273.362222477
I0725 10:44:06.589527       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-1" condition "Ready" to 2026-07-25 10:44:06.589517644 +0000 UTC m=+273.376706522
I0725 10:44:06.609916       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:44:06.609907023 +0000 UTC m=+273.397095901
I0725 10:44:06.621759       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:44:06.623401       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:44:06.623392113 +0000 UTC m=+273.410580991
I0725 10:44:06.638699       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:46:59.390392       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 10:46:59.390350404 +0000 UTC m=+446.177539282
I0725 10:46:59.390592       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 10:46:59.390645       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 10:46:59.390633161 +0000 UTC m=+446.177822069
I0725 10:46:59.403379       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:46:59.403448       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 10:46:59.403441363 +0000 UTC m=+446.190630221
I0725 10:46:59.566060       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:46:59.599840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-25 10:46:59.599821671 +0000 UTC m=+446.387010569
I0725 10:46:59.614210       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-25 10:46:59.614199 +0000 UTC m=+446.401387878
I0725 10:46:59.634989       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 10:46:59.634973434 +0000 UTC m=+446.422162312
I0725 10:46:59.648411       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 10:46:59.681083       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"