I0408 01:13:37.311251       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0408 01:13:37.311315       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0408 01:13:37.311360       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0408 01:13:37.315852       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0408 01:13:37.316270       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0408 01:13:37.316352       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0408 01:13:37.316375       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0408 01:13:37.319074       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0408 01:13:37.333494       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0408 01:13:37.339090       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0408 01:13:37.341417       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0408 01:13:37.345982       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0408 01:13:37.346150       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0408 01:13:37.350051       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0408 01:13:37.352440       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0408 01:13:37.354839       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0408 01:13:37.357166       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0408 01:13:37.359724       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0408 01:13:37.361938       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0408 01:13:37.361967       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0408 01:13:37.361971       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0408 01:13:37.367566       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0408 01:13:37.371746       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0408 01:13:37.374806       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0408 01:13:37.377155       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0408 01:13:37.379175       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0408 01:13:37.380977       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0408 01:13:37.382824       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0408 01:13:37.384480       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0408 01:13:37.386448       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0408 01:13:37.386499       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0408 01:13:37.386523       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0408 01:13:37.386597       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0408 01:13:37.392467       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.393444       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.393933       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.394174       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.394545       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.394553       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.394869       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.395685       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.395983       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:37.483828       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0408 01:13:47.802087       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 01:13:47.802056329 +0000 UTC m=+10.522094577
I0408 01:13:48.485729       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:13:48.485716596 +0000 UTC m=+11.205754804
I0408 01:13:48.486708       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 01:13:48.486729       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 01:13:48.486725217 +0000 UTC m=+11.206763435
E0408 01:13:48.503226       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 01:13:48.503302       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 01:13:48.503294824 +0000 UTC m=+11.223333042
E0408 01:13:48.503325       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0408 01:13:48.503982       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:13:48.504096       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 01:13:48.504126       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 01:13:48.504110957 +0000 UTC m=+11.224149165
E0408 01:13:48.515277       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0408 01:13:48.515514       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 01:13:48.515596       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0408 01:13:48.515697       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0408 01:13:48.539368       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:13:48.546211       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zz2d9" condition "Approved" to 2026-04-08 01:13:48.546196427 +0000 UTC m=+11.266234655
I0408 01:13:48.557476       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zz2d9" condition "Ready" to 2026-04-08 01:13:48.557465557 +0000 UTC m=+11.277503775
I0408 01:13:48.575365       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:13:48.575356649 +0000 UTC m=+11.295394867
I0408 01:13:48.593228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:13:48.593758       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:13:48.59374928 +0000 UTC m=+11.313787508
I0408 01:13:48.610911       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:13:53.515734       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:13:53.515722276 +0000 UTC m=+16.235760494
I0408 01:14:14.666829       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 01:14:14.666887       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 01:14:14.666880485 +0000 UTC m=+37.386918693
I0408 01:14:14.667332       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:14:14.667327739 +0000 UTC m=+37.387365937
I0408 01:14:14.681665       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 01:14:14.681651132 +0000 UTC m=+37.401689340
I0408 01:14:14.710200       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:14:14.710259       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:14:14.710252017 +0000 UTC m=+37.430290235
I0408 01:14:14.917944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:14:14.955454       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xcsr6" condition "Approved" to 2026-04-08 01:14:14.955432097 +0000 UTC m=+37.675470335
I0408 01:14:14.984201       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xcsr6" condition "Ready" to 2026-04-08 01:14:14.984192047 +0000 UTC m=+37.704230245
I0408 01:14:15.015051       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:14:15.015037787 +0000 UTC m=+37.735076005
I0408 01:14:15.040890       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:14:15.041363       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:14:15.041353935 +0000 UTC m=+37.761392153
I0408 01:14:15.068678       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:18:18.440407       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0408 01:18:18.440434       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Issuing" to 2026-04-08 01:18:18.440428293 +0000 UTC m=+281.160466501
I0408 01:18:18.440689       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Ready" to 2026-04-08 01:18:18.440678101 +0000 UTC m=+281.160716319
I0408 01:18:18.455748       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:18:18.456209       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Ready" to 2026-04-08 01:18:18.456203497 +0000 UTC m=+281.176241705
I0408 01:18:18.573142       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0408 01:18:18.602526       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-204.nip.io-tls-bt6sw" condition "Approved" to 2026-04-08 01:18:18.602513932 +0000 UTC m=+281.322552150
I0408 01:18:18.633989       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-204.nip.io-tls-bt6sw" condition "Ready" to 2026-04-08 01:18:18.633977757 +0000 UTC m=+281.354015975
I0408 01:18:18.660496       1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:18:18.66048668 +0000 UTC m=+281.380524898
I0408 01:18:18.679284       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"