I0725 13:36:54.290032       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0725 13:36:54.290154       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0725 13:36:54.293562       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0725 13:36:54.293584       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0725 13:36:54.293605       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0725 13:36:54.293965       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0725 13:36:54.294031       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0725 13:36:54.294047       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0725 13:36:54.298613       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0725 13:36:54.316806       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0725 13:36:54.321759       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0725 13:36:54.321804       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0725 13:36:54.325453       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0725 13:36:54.328391       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0725 13:36:54.336008       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0725 13:36:54.341174       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0725 13:36:54.341274       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0725 13:36:54.341284       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0725 13:36:54.341384       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0725 13:36:54.343502       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0725 13:36:54.350220       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0725 13:36:54.350253       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0725 13:36:54.356188       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0725 13:36:54.360711       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0725 13:36:54.363200       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0725 13:36:54.365370       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0725 13:36:54.373521       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0725 13:36:54.376076       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0725 13:36:54.380284       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0725 13:36:54.384560       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0725 13:36:54.384725       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0725 13:36:54.390479       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0725 13:36:54.392790       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0725 13:36:54.394840       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0725 13:36:54.397991       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.398271       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.398634       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.398839       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.399098       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.399511       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.538190       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.538912       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.539044       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.539655       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:36:54.539736       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:37:14.919402       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 13:37:14.919380172 +0000 UTC m=+20.656394199
I0725 13:37:14.921186       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:37:14.921237       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 13:37:14.921232869 +0000 UTC m=+20.658246896
I0725 13:37:14.952091       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 13:37:14.952081102 +0000 UTC m=+20.689095119
I0725 13:37:14.952345       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:37:14.952422       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:37:14.952455       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 13:37:14.952447898 +0000 UTC m=+20.689461915
I0725 13:37:15.193652       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:37:15.211516       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-25 13:37:15.211503763 +0000 UTC m=+20.948517780
I0725 13:37:15.239046       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-25 13:37:15.239033648 +0000 UTC m=+20.976047675
I0725 13:37:15.265877       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:37:15.265866952 +0000 UTC m=+21.002880979
I0725 13:37:15.286209       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:37:15.287455       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:37:15.287447309 +0000 UTC m=+21.024461336
I0725 13:37:15.306580       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:43:55.854996       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 13:43:55.854943301 +0000 UTC m=+421.591957358
I0725 13:43:56.587705       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:43:56.587779       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 13:43:56.587769034 +0000 UTC m=+422.324783081
I0725 13:43:56.588378       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 13:43:56.588368273 +0000 UTC m=+422.325382330
I0725 13:43:56.599365       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:43:56.599421       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 13:43:56.599414466 +0000 UTC m=+422.336428493
E0725 13:43:56.603289       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 13:43:56.603354       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 13:43:56.603346071 +0000 UTC m=+422.340360098
E0725 13:43:56.603379       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 13:43:56.615098       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0725 13:43:56.615230       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0725 13:43:56.615390       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:43:56.615418       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:43:56.615482       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0725 13:43:56.638766       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 13:43:56.638752212 +0000 UTC m=+422.375766239
I0725 13:43:56.654372       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 13:43:56.654359621 +0000 UTC m=+422.391373648
I0725 13:43:56.671808       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:43:56.671794767 +0000 UTC m=+422.408808784
I0725 13:43:56.692316       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:43:56.692690       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:43:56.692683745 +0000 UTC m=+422.429697762
I0725 13:43:56.703918       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:43:56.704323       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:43:56.704311206 +0000 UTC m=+422.441325253
I0725 13:44:01.615793       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:44:01.615778152 +0000 UTC m=+427.352792209
I0725 13:48:04.368240       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:48:04.368251       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-07-25 13:48:04.368194248 +0000 UTC m=+670.105208295
I0725 13:48:04.368300       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-07-25 13:48:04.368291551 +0000 UTC m=+670.105305578
I0725 13:48:04.379179       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:04.379265       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-07-25 13:48:04.379258113 +0000 UTC m=+670.116272160
I0725 13:48:04.582372       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:04.613049       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-1" condition "Approved" to 2026-07-25 13:48:04.613037028 +0000 UTC m=+670.350051055
I0725 13:48:04.629106       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-1" condition "Ready" to 2026-07-25 13:48:04.629095493 +0000 UTC m=+670.366109530
I0725 13:48:04.648890       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:48:04.648881548 +0000 UTC m=+670.385895585
I0725 13:48:04.661737       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:04.698542       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:51:03.094250       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:51:03.094310       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 13:51:03.094302165 +0000 UTC m=+848.831316192
I0725 13:51:03.094381       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 13:51:03.094366287 +0000 UTC m=+848.831380344
I0725 13:51:03.109411       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:51:03.109545       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:51:03.109579       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 13:51:03.109573753 +0000 UTC m=+848.846587780
I0725 13:51:03.250155       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:51:03.265734       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-25 13:51:03.265718396 +0000 UTC m=+849.002732453
I0725 13:51:03.279924       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-25 13:51:03.27991306 +0000 UTC m=+849.016927097
I0725 13:51:03.307468       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:51:03.307457941 +0000 UTC m=+849.044471948
I0725 13:51:03.320761       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:51:03.321343       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:51:03.321334765 +0000 UTC m=+849.058348782
I0725 13:51:03.336271       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"