I0725 13:34:39.869549       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0725 13:34:39.869769       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0725 13:34:39.875247       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0725 13:34:39.875281       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0725 13:34:39.875298       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0725 13:34:39.875828       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0725 13:34:39.875793       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0725 13:34:39.875881       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0725 13:34:39.879998       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0725 13:34:39.893210       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0725 13:34:39.901280       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0725 13:34:39.901304       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0725 13:34:39.901479       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0725 13:34:39.904545       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0725 13:34:39.907372       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0725 13:34:39.910387       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0725 13:34:39.912934       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0725 13:34:39.917197       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0725 13:34:39.919102       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0725 13:34:39.919208       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0725 13:34:39.921072       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0725 13:34:39.922846       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0725 13:34:39.924628       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0725 13:34:39.924757       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0725 13:34:39.926457       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0725 13:34:39.926583       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0725 13:34:39.929823       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0725 13:34:39.934726       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0725 13:34:39.934897       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0725 13:34:39.937488       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0725 13:34:39.941386       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0725 13:34:39.943036       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0725 13:34:39.945178       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0725 13:34:39.947172       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0725 13:34:39.948718       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.949653       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.950379       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.950933       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.951177       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.974531       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:39.990459       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:40.008847       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:40.022701       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:40.038002       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:34:40.054978       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0725 13:35:15.979582       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:35:15.979914       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 13:35:15.979874903 +0000 UTC m=+36.143057031
I0725 13:35:15.980042       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 13:35:15.979876403 +0000 UTC m=+36.143058521
I0725 13:35:15.991819       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 13:35:15.991808961 +0000 UTC m=+36.154991049
I0725 13:35:16.001901       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:35:16.001979       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 13:35:16.001972184 +0000 UTC m=+36.165154292
I0725 13:35:16.142858       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:35:16.178736       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-25 13:35:16.178717651 +0000 UTC m=+36.341899779
I0725 13:35:16.208895       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-25 13:35:16.208882388 +0000 UTC m=+36.372064526
I0725 13:35:16.236834       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:35:16.236822358 +0000 UTC m=+36.400004466
I0725 13:35:16.260087       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:41:45.765216       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 13:41:45.765179642 +0000 UTC m=+425.928361780
I0725 13:41:46.519981       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:41:46.520034       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 13:41:46.520023037 +0000 UTC m=+426.683205165
I0725 13:41:46.520162       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 13:41:46.520155941 +0000 UTC m=+426.683338049
E0725 13:41:46.530721       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 13:41:46.530850       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 13:41:46.530820506 +0000 UTC m=+426.694002644
E0725 13:41:46.530885       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0725 13:41:46.531820       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:41:46.531926       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:41:46.531964       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 13:41:46.531952003 +0000 UTC m=+426.695134131
E0725 13:41:46.539607       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0725 13:41:46.539726       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:41:46.539785       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0725 13:41:46.539826       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0725 13:41:46.570396       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-25 13:41:46.570378037 +0000 UTC m=+426.733560175
I0725 13:41:46.593466       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-25 13:41:46.59345225 +0000 UTC m=+426.756634358
I0725 13:41:46.614176       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:41:46.614161763 +0000 UTC m=+426.777343881
I0725 13:41:46.628384       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:41:46.628717       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:41:46.628708095 +0000 UTC m=+426.791890203
I0725 13:41:46.642958       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:41:51.540954       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:41:51.540936472 +0000 UTC m=+431.704118590
I0725 13:46:04.746662       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-07-25 13:46:04.746627723 +0000 UTC m=+684.909809831
I0725 13:46:04.747100       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:46:04.747149       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-07-25 13:46:04.747145106 +0000 UTC m=+684.910327214
I0725 13:46:04.763607       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:46:04.763683       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:46:04.763710       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-07-25 13:46:04.763701496 +0000 UTC m=+684.926883634
I0725 13:46:05.190467       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:46:05.208024       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-1" condition "Approved" to 2026-07-25 13:46:05.208007559 +0000 UTC m=+685.371189657
I0725 13:46:05.224809       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-1" condition "Ready" to 2026-07-25 13:46:05.224800055 +0000 UTC m=+685.387982153
I0725 13:46:05.245802       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:46:05.245791814 +0000 UTC m=+685.408973912
I0725 13:46:05.257309       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:57.413231       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0725 13:48:57.413310       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 13:48:57.413270179 +0000 UTC m=+857.576452287
I0725 13:48:57.413602       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 13:48:57.413586097 +0000 UTC m=+857.576768265
I0725 13:48:57.424958       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:57.425035       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 13:48:57.425026469 +0000 UTC m=+857.588208577
I0725 13:48:57.630008       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:57.659051       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-25 13:48:57.659040941 +0000 UTC m=+857.822223039
I0725 13:48:57.675145       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-25 13:48:57.675131818 +0000 UTC m=+857.838313956
I0725 13:48:57.696004       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:48:57.695990172 +0000 UTC m=+857.859172280
I0725 13:48:57.706305       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:57.707177       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 13:48:57.707167168 +0000 UTC m=+857.870349296
I0725 13:48:57.717374       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0725 13:48:57.721843       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"