I0511 10:43:26.024535       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0511 10:43:26.024664       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0511 10:43:26.024791       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0511 10:43:26.034052       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0511 10:43:26.034780       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0511 10:43:26.034815       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0511 10:43:26.034829       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0511 10:43:26.039560       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0511 10:43:26.054459       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0511 10:43:26.061990       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0511 10:43:26.064636       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0511 10:43:26.067060       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0511 10:43:26.073862       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0511 10:43:26.078745       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0511 10:43:26.080757       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0511 10:43:26.082651       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0511 10:43:26.084407       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0511 10:43:26.086633       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0511 10:43:26.088502       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0511 10:43:26.092389       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0511 10:43:26.094777       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0511 10:43:26.096449       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0511 10:43:26.096491       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0511 10:43:26.096513       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0511 10:43:26.096506       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0511 10:43:26.098509       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0511 10:43:26.100260       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0511 10:43:26.102054       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0511 10:43:26.103754       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0511 10:43:26.103796       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0511 10:43:26.103815       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0511 10:43:26.103848       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0511 10:43:26.106193       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0511 10:43:26.109372       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.109988       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.110796       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.111300       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.126307       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.171898       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.184376       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.197782       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.203147       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:26.227392       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 10:43:38.132589       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-11 10:43:38.132571809 +0000 UTC m=+12.139208563
I0511 10:43:38.799489       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 10:43:38.799473307 +0000 UTC m=+12.806110061
I0511 10:43:38.799736       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 10:43:38.799804       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 10:43:38.799797856 +0000 UTC m=+12.806434590
I0511 10:43:38.818005       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:43:38.818137       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 10:43:38.818058041 +0000 UTC m=+12.824694775
E0511 10:43:38.818071       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0511 10:43:38.818275       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-11 10:43:38.818260297 +0000 UTC m=+12.824897061
E0511 10:43:38.818327       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 10:43:38.835280       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0511 10:43:38.835393       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0511 10:43:38.835448       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 10:43:38.835508       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 10:43:38.835539       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0511 10:43:38.854384       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5jzb5" condition "Approved" to 2026-05-11 10:43:38.854371866 +0000 UTC m=+12.861008630
I0511 10:43:38.869966       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5jzb5" condition "Ready" to 2026-05-11 10:43:38.869953973 +0000 UTC m=+12.876590707
I0511 10:43:38.897137       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:43:38.897127065 +0000 UTC m=+12.903763799
I0511 10:43:38.912811       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:43:38.956319       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:43:43.836270       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:43:43.836256906 +0000 UTC m=+17.842893690
I0511 10:44:08.347427       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 10:44:08.347378478 +0000 UTC m=+42.354015212
I0511 10:44:08.347449       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 10:44:08.348219       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 10:44:08.348208346 +0000 UTC m=+42.354845080
I0511 10:44:08.384395       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-11 10:44:08.383490945 +0000 UTC m=+42.390127669
I0511 10:44:08.389596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:44:08.389784       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 10:44:08.389863       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 10:44:08.389851565 +0000 UTC m=+42.396488299
I0511 10:44:08.651281       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:44:08.661732       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n47p8" condition "Approved" to 2026-05-11 10:44:08.661721601 +0000 UTC m=+42.668358325
I0511 10:44:08.695314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n47p8" condition "Ready" to 2026-05-11 10:44:08.695296902 +0000 UTC m=+42.701933666
I0511 10:44:08.730740       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:44:08.730721173 +0000 UTC m=+42.737357937
I0511 10:44:08.767866       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:44:08.769243       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:44:08.769232412 +0000 UTC m=+42.775869176
I0511 10:44:08.791820       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:44:08.792328       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:44:08.792315481 +0000 UTC m=+42.798952245
I0511 10:44:08.804384       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:48:13.354578       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-05-11 10:48:13.354532918 +0000 UTC m=+287.361169652
I0511 10:48:13.355062       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 10:48:13.355095       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-05-11 10:48:13.355092659 +0000 UTC m=+287.361729373
I0511 10:48:13.373080       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:48:13.373164       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-05-11 10:48:13.373155504 +0000 UTC m=+287.379792238
I0511 10:48:13.701244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:48:13.727228       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-rw5ll" condition "Approved" to 2026-05-11 10:48:13.72721225 +0000 UTC m=+287.733849004
I0511 10:48:13.754098       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-rw5ll" condition "Ready" to 2026-05-11 10:48:13.754071639 +0000 UTC m=+287.760708373
I0511 10:48:13.789594       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:48:13.789579579 +0000 UTC m=+287.796216343
I0511 10:48:13.809324       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0511 10:48:13.809767       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:48:13.809757056 +0000 UTC m=+287.816393820
I0511 10:48:13.825100       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"