I0511 00:52:22.372829       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0511 00:52:22.372995       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0511 00:52:22.373149       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0511 00:52:22.379754       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0511 00:52:22.380475       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0511 00:52:22.380539       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0511 00:52:22.380581       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0511 00:52:22.383493       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0511 00:52:22.394565       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0511 00:52:22.399534       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0511 00:52:22.403668       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0511 00:52:22.408091       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0511 00:52:22.408184       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0511 00:52:22.410201       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0511 00:52:22.412012       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0511 00:52:22.413756       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0511 00:52:22.415422       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0511 00:52:22.418721       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0511 00:52:22.420515       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0511 00:52:22.426359       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0511 00:52:22.426403       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0511 00:52:22.426447       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0511 00:52:22.430384       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0511 00:52:22.432580       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0511 00:52:22.432601       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0511 00:52:22.432710       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0511 00:52:22.435044       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0511 00:52:22.437365       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0511 00:52:22.439711       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0511 00:52:22.442281       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0511 00:52:22.444180       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0511 00:52:22.444239       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0511 00:52:22.446590       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0511 00:52:22.452023       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.452398       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.453101       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.453578       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.453632       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.453585       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.454197       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.454476       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.455001       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:22.526007       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 00:52:34.613794       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-11 00:52:34.613779384 +0000 UTC m=+12.268202208
I0511 00:52:35.297452       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 00:52:35.297508       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 00:52:35.297500284 +0000 UTC m=+12.951923098
I0511 00:52:35.297607       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 00:52:35.297595337 +0000 UTC m=+12.952018211
I0511 00:52:35.314090       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:52:35.314174       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 00:52:35.314166125 +0000 UTC m=+12.968588949
E0511 00:52:35.314608       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0511 00:52:35.314746       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-11 00:52:35.314734602 +0000 UTC m=+12.969157436
E0511 00:52:35.314821       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 00:52:35.330712       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0511 00:52:35.331167       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 00:52:35.331318       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 00:52:35.331420       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0511 00:52:35.333463       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:52:35.356062       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7smzv" condition "Approved" to 2026-05-11 00:52:35.356050231 +0000 UTC m=+13.010473045
I0511 00:52:35.370282       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7smzv" condition "Ready" to 2026-05-11 00:52:35.370268418 +0000 UTC m=+13.024691242
I0511 00:52:35.394560       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:52:35.394542762 +0000 UTC m=+13.048965576
I0511 00:52:35.420432       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:52:35.420928       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:52:35.420916542 +0000 UTC m=+13.075339356
I0511 00:52:35.438732       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:52:35.439091       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:52:35.43908175 +0000 UTC m=+13.093504574
I0511 00:52:40.331782       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:52:40.33176971 +0000 UTC m=+17.986192534
I0511 00:53:00.722202       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 00:53:00.722160257 +0000 UTC m=+38.376583081
I0511 00:53:00.722572       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 00:53:00.722593       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 00:53:00.722588918 +0000 UTC m=+38.377011742
I0511 00:53:00.730663       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-11 00:53:00.730652007 +0000 UTC m=+38.385074831
I0511 00:53:00.739356       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:53:00.739418       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 00:53:00.739411864 +0000 UTC m=+38.393834688
I0511 00:53:01.145660       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:53:01.178267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqckl" condition "Approved" to 2026-05-11 00:53:01.178256783 +0000 UTC m=+38.832679607
I0511 00:53:01.204456       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqckl" condition "Ready" to 2026-05-11 00:53:01.204444327 +0000 UTC m=+38.858867151
I0511 00:53:01.238188       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:53:01.238175366 +0000 UTC m=+38.892598200
I0511 00:53:01.257756       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:53:01.313927       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:57:27.530721       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-05-11 00:57:27.530690064 +0000 UTC m=+305.185112918
I0511 00:57:27.531153       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 00:57:27.531227       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-05-11 00:57:27.531217899 +0000 UTC m=+305.185640773
I0511 00:57:27.557763       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:57:27.557865       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-05-11 00:57:27.557856652 +0000 UTC m=+305.212279476
I0511 00:57:27.816469       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0511 00:57:27.850081       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-zjxkq" condition "Approved" to 2026-05-11 00:57:27.850072126 +0000 UTC m=+305.504494950
I0511 00:57:27.877563       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-zjxkq" condition "Ready" to 2026-05-11 00:57:27.877544603 +0000 UTC m=+305.531967457
I0511 00:57:27.907535       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 00:57:27.90752461 +0000 UTC m=+305.561947434
I0511 00:57:27.925333       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"