I0529 21:54:01.315638       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0529 21:54:01.315813       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0529 21:54:01.315914       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0529 21:54:01.320889       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0529 21:54:01.321394       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0529 21:54:01.321554       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0529 21:54:01.321612       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0529 21:54:01.323974       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0529 21:54:01.341690       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0529 21:54:01.341963       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0529 21:54:01.349468       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0529 21:54:01.349862       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0529 21:54:01.353326       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0529 21:54:01.355256       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0529 21:54:01.357318       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0529 21:54:01.357346       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0529 21:54:01.359594       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0529 21:54:01.362173       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0529 21:54:01.364512       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0529 21:54:01.366860       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0529 21:54:01.374970       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0529 21:54:01.375070       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0529 21:54:01.378540       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0529 21:54:01.380522       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0529 21:54:01.382421       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0529 21:54:01.384050       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0529 21:54:01.384166       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0529 21:54:01.386036       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0529 21:54:01.387867       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0529 21:54:01.389654       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0529 21:54:01.394294       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0529 21:54:01.398464       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0529 21:54:01.398521       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0529 21:54:01.400690       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.402772       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.404506       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.422970       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.434703       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.446366       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.463839       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.498409       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.501746       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:01.520028       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0529 21:54:14.336744       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-29 21:54:14.336719494 +0000 UTC m=+13.059416317
I0529 21:54:15.029483       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 21:54:15.029519       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 21:54:15.029504128 +0000 UTC m=+13.752200941
I0529 21:54:15.029545       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-29 21:54:15.029535069 +0000 UTC m=+13.752231892
E0529 21:54:15.042482       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0529 21:54:15.042544       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-29 21:54:15.042535148 +0000 UTC m=+13.765231941
E0529 21:54:15.042568       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0529 21:54:15.052271       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.053156       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 21:54:15.053146983 +0000 UTC m=+13.775843796
E0529 21:54:15.061686       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0529 21:54:15.061909       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0529 21:54:15.061970       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0529 21:54:15.062070       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0529 21:54:15.068186       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.068468       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 21:54:15.068456663 +0000 UTC m=+13.791153506
I0529 21:54:15.072266       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.072633       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wv8pb" condition "Approved" to 2026-05-29 21:54:15.07262041 +0000 UTC m=+13.795317203
I0529 21:54:15.081286       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 21:54:15.081272029 +0000 UTC m=+13.803968832
I0529 21:54:15.089143       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.089847       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wv8pb" condition "Ready" to 2026-05-29 21:54:15.089836236 +0000 UTC m=+13.812533029
I0529 21:54:15.115757       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:54:15.115743861 +0000 UTC m=+13.838440674
I0529 21:54:15.132084       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.132388       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:54:15.132380387 +0000 UTC m=+13.855077180
I0529 21:54:15.138446       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:15.151029       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:20.062401       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:54:20.06238751 +0000 UTC m=+18.785084313
I0529 21:54:49.310438       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 21:54:49.310484       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 21:54:49.310465227 +0000 UTC m=+48.033162020
I0529 21:54:49.312134       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 21:54:49.312108162 +0000 UTC m=+48.034804955
I0529 21:54:49.348458       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-29 21:54:49.348442478 +0000 UTC m=+48.071139291
I0529 21:54:49.360192       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:49.360464       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 21:54:49.360454552 +0000 UTC m=+48.083151345
I0529 21:54:50.465471       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:52.747234       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c7cmz" condition "Approved" to 2026-05-29 21:54:52.74721995 +0000 UTC m=+51.469916743
I0529 21:54:52.822832       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:52.929001       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c7cmz" condition "Ready" to 2026-05-29 21:54:52.928992109 +0000 UTC m=+51.651688892
I0529 21:54:53.329076       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:54:53.329063737 +0000 UTC m=+52.051760510
I0529 21:54:53.770731       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:53.771228       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:54:53.771217204 +0000 UTC m=+52.493914017
I0529 21:54:53.924026       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:54:53.926467       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:59:16.616462       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0529 21:59:16.617477       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-05-29 21:59:16.616500493 +0000 UTC m=+315.339197316
I0529 21:59:16.618656       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-05-29 21:59:16.618645578 +0000 UTC m=+315.341342401
I0529 21:59:16.641505       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:59:16.641753       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-05-29 21:59:16.641744688 +0000 UTC m=+315.364441471
I0529 21:59:16.930255       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0529 21:59:16.961389       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-wwqfh" condition "Approved" to 2026-05-29 21:59:16.961375307 +0000 UTC m=+315.684072120
I0529 21:59:16.994424       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-wwqfh" condition "Ready" to 2026-05-29 21:59:16.994406045 +0000 UTC m=+315.717102838
I0529 21:59:17.023494       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 21:59:17.023483751 +0000 UTC m=+315.746180544
I0529 21:59:17.047221       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"