I0610 02:39:10.772079       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0610 02:39:10.772180       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0610 02:39:10.772303       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0610 02:39:10.777961       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0610 02:39:10.778450       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0610 02:39:10.778608       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0610 02:39:10.778611       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0610 02:39:10.781807       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0610 02:39:10.794694       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0610 02:39:10.799089       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0610 02:39:10.801459       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0610 02:39:10.801568       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0610 02:39:10.806048       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0610 02:39:10.809066       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0610 02:39:10.811890       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0610 02:39:10.814301       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0610 02:39:10.816249       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0610 02:39:10.816307       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0610 02:39:10.818413       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0610 02:39:10.820662       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0610 02:39:10.822428       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0610 02:39:10.827730       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0610 02:39:10.832605       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0610 02:39:10.835807       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0610 02:39:10.838479       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0610 02:39:10.838542       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0610 02:39:10.838544       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0610 02:39:10.841181       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0610 02:39:10.843265       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0610 02:39:10.843325       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0610 02:39:10.845927       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0610 02:39:10.848260       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0610 02:39:10.848279       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0610 02:39:10.851768       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.852798       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.853207       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.853722       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.881519       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.892897       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.904927       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.924130       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.939218       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:10.957390       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0610 02:39:22.672147       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-10 02:39:22.672123323 +0000 UTC m=+11.931837189
I0610 02:39:23.418405       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0610 02:39:23.418466       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 02:39:23.418457004 +0000 UTC m=+12.678170850
I0610 02:39:23.418700       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 02:39:23.41868871 +0000 UTC m=+12.678402586
E0610 02:39:23.431405       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0610 02:39:23.431615       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-10 02:39:23.431603343 +0000 UTC m=+12.691317199
E0610 02:39:23.432254       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0610 02:39:23.435944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:23.436131       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 02:39:23.436123563 +0000 UTC m=+12.695837419
E0610 02:39:23.446026       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0610 02:39:23.448598       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0610 02:39:23.449763       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0610 02:39:23.449828       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0610 02:39:23.449870       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0610 02:39:23.453151       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:23.453200       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 02:39:23.453183215 +0000 UTC m=+12.712897051
I0610 02:39:23.455727       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wf8b9" condition "Approved" to 2026-06-10 02:39:23.455712303 +0000 UTC m=+12.715426169
I0610 02:39:23.465143       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 02:39:23.465134033 +0000 UTC m=+12.724847879
I0610 02:39:23.469384       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wf8b9" condition "Ready" to 2026-06-10 02:39:23.469376655 +0000 UTC m=+12.729090511
I0610 02:39:23.471195       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:23.492374       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:23.492362395 +0000 UTC m=+12.752076251
I0610 02:39:23.511415       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:23.511629       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:23.511622887 +0000 UTC m=+12.771336723
I0610 02:39:23.521361       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:23.521609       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:23.521576331 +0000 UTC m=+12.781290177
I0610 02:39:28.446508       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:28.446498149 +0000 UTC m=+17.706211995
I0610 02:39:51.821074       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-10 02:39:51.821026093 +0000 UTC m=+41.080739939
I0610 02:39:51.821432       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0610 02:39:51.821557       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 02:39:51.821500233 +0000 UTC m=+41.081214099
I0610 02:39:51.841316       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-10 02:39:51.841294271 +0000 UTC m=+41.101008107
I0610 02:39:51.845540       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:51.845626       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0610 02:39:51.845649       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 02:39:51.845644141 +0000 UTC m=+41.105357977
I0610 02:39:52.040858       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qhxsl" condition "Approved" to 2026-06-10 02:39:52.040846804 +0000 UTC m=+41.300560650
I0610 02:39:52.075223       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qhxsl" condition "Ready" to 2026-06-10 02:39:52.075209795 +0000 UTC m=+41.334923641
I0610 02:39:52.105251       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:52.105236697 +0000 UTC m=+41.364950563
I0610 02:39:52.131612       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:52.131918       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:39:52.131912201 +0000 UTC m=+41.391626027
I0610 02:39:52.134025       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:39:52.154021       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:44:09.003711       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0610 02:44:09.004014       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-06-10 02:44:09.004007405 +0000 UTC m=+298.263721251
I0610 02:44:09.004110       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-06-10 02:44:09.004095717 +0000 UTC m=+298.263809543
I0610 02:44:09.019557       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:44:09.019617       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-06-10 02:44:09.019608208 +0000 UTC m=+298.279322054
I0610 02:44:09.215396       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:44:09.242732       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-hrxnx" condition "Approved" to 2026-06-10 02:44:09.242723649 +0000 UTC m=+298.502437485
I0610 02:44:09.277697       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-hrxnx" condition "Ready" to 2026-06-10 02:44:09.277688917 +0000 UTC m=+298.537402753
I0610 02:44:09.326518       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 02:44:09.326502825 +0000 UTC m=+298.586216701
I0610 02:44:09.369207       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0610 02:44:09.476607       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"