I0608 22:08:27.536194       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0608 22:08:27.536383       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0608 22:08:27.536493       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0608 22:08:27.544249       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0608 22:08:27.544803       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0608 22:08:27.544880       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0608 22:08:27.544921       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0608 22:08:27.547729       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0608 22:08:27.564510       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0608 22:08:27.565176       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0608 22:08:27.569495       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0608 22:08:27.572075       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0608 22:08:27.575764       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0608 22:08:27.580556       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0608 22:08:27.583265       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0608 22:08:27.585580       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0608 22:08:27.585619       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0608 22:08:27.585662       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0608 22:08:27.588451       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0608 22:08:27.590256       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0608 22:08:27.591909       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0608 22:08:27.595435       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0608 22:08:27.600764       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0608 22:08:27.603516       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0608 22:08:27.606084       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0608 22:08:27.606125       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0608 22:08:27.606164       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0608 22:08:27.608824       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0608 22:08:27.612485       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0608 22:08:27.616236       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0608 22:08:27.618878       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0608 22:08:27.621414       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0608 22:08:27.621527       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0608 22:08:27.626924       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.629463       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.630111       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.630134       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.645611       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.668821       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.687667       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.707915       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.722528       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:27.732485       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0608 22:08:40.576190       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-08 22:08:40.576150538 +0000 UTC m=+13.085102626
I0608 22:08:41.354672       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 22:08:41.354659804 +0000 UTC m=+13.863611882
I0608 22:08:41.355161       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0608 22:08:41.355367       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-08 22:08:41.355352904 +0000 UTC m=+13.864305002
E0608 22:08:41.373435       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0608 22:08:41.373506       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-08 22:08:41.373498305 +0000 UTC m=+13.882450373
E0608 22:08:41.373592       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0608 22:08:41.377478       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:08:41.379033       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 22:08:41.379009369 +0000 UTC m=+13.887961467
E0608 22:08:41.386554       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0608 22:08:41.387454       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0608 22:08:41.387490       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0608 22:08:41.387739       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0608 22:08:41.396964       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:08:41.426413       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2952f" condition "Approved" to 2026-06-08 22:08:41.426384757 +0000 UTC m=+13.935336825
I0608 22:08:41.439758       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2952f" condition "Ready" to 2026-06-08 22:08:41.439743324 +0000 UTC m=+13.948695392
I0608 22:08:41.468873       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:08:41.46885877 +0000 UTC m=+13.977810828
I0608 22:08:41.488102       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:08:41.534725       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:08:46.387331       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:08:46.387315164 +0000 UTC m=+18.896267252
I0608 22:09:10.233891       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0608 22:09:10.233988       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-08 22:09:10.233944356 +0000 UTC m=+42.742896424
I0608 22:09:10.234047       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-08 22:09:10.234033378 +0000 UTC m=+42.742985446
I0608 22:09:10.249763       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-08 22:09:10.24974858 +0000 UTC m=+42.758700648
I0608 22:09:10.275903       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:09:10.276365       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0608 22:09:10.276546       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-08 22:09:10.276526317 +0000 UTC m=+42.785478405
I0608 22:09:10.500505       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:09:10.513835       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wwvdg" condition "Approved" to 2026-06-08 22:09:10.513825524 +0000 UTC m=+43.022777592
I0608 22:09:10.549930       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wwvdg" condition "Ready" to 2026-06-08 22:09:10.549918006 +0000 UTC m=+43.058870074
I0608 22:09:10.578268       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:09:10.578255399 +0000 UTC m=+43.087207467
I0608 22:09:10.602045       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:09:10.603176       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:09:10.603168142 +0000 UTC m=+43.112120200
I0608 22:09:10.626347       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:13:57.819929       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-06-08 22:13:57.819885462 +0000 UTC m=+330.328837510
I0608 22:13:57.827635       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0608 22:13:57.827666       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-06-08 22:13:57.827658914 +0000 UTC m=+330.336610972
I0608 22:13:57.855479       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:13:57.855526       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0608 22:13:57.855537       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-06-08 22:13:57.85553219 +0000 UTC m=+330.364484248
I0608 22:13:58.074782       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-2rc9l" condition "Approved" to 2026-06-08 22:13:58.074769751 +0000 UTC m=+330.583721819
I0608 22:13:58.112116       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-2rc9l" condition "Ready" to 2026-06-08 22:13:58.112103503 +0000 UTC m=+330.621055571
I0608 22:13:58.137830       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:13:58.13781407 +0000 UTC m=+330.646766168
I0608 22:13:58.164917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:13:58.165400       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:13:58.165390167 +0000 UTC m=+330.674342235
I0608 22:13:58.190130       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0608 22:13:58.190489       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 22:13:58.19048008 +0000 UTC m=+330.699432148