I0407 05:48:18.266372       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0407 05:48:18.266481       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0407 05:48:18.266548       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0407 05:48:18.270734       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0407 05:48:18.271068       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0407 05:48:18.271157       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0407 05:48:18.271178       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0407 05:48:18.273428       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0407 05:48:18.287692       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0407 05:48:18.290710       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0407 05:48:18.293975       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0407 05:48:18.300045       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0407 05:48:18.302238       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0407 05:48:18.304792       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0407 05:48:18.307693       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0407 05:48:18.309960       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0407 05:48:18.310055       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0407 05:48:18.311853       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0407 05:48:18.314261       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0407 05:48:18.318776       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0407 05:48:18.321561       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0407 05:48:18.324088       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0407 05:48:18.326819       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0407 05:48:18.326879       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0407 05:48:18.326974       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0407 05:48:18.330636       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0407 05:48:18.333885       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0407 05:48:18.333938       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0407 05:48:18.336516       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0407 05:48:18.339224       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0407 05:48:18.339251       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0407 05:48:18.339383       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0407 05:48:18.342840       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0407 05:48:18.346723       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.347351       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.348741       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.361920       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.376616       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.394338       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.408536       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.428083       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.431107       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:18.445481       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 05:48:30.587597       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 05:48:30.587587481 +0000 UTC m=+12.350534532
I0407 05:48:31.431658       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:48:31.431648487 +0000 UTC m=+13.194595548
I0407 05:48:31.432300       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 05:48:31.432324       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 05:48:31.43232048 +0000 UTC m=+13.195267541
I0407 05:48:31.445261       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:31.445338       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 05:48:31.445358       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 05:48:31.445352174 +0000 UTC m=+13.208299225
E0407 05:48:31.445959       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 05:48:31.446007       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 05:48:31.446002546 +0000 UTC m=+13.208949607
E0407 05:48:31.446027       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 05:48:31.460540       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0407 05:48:31.461455       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 05:48:31.461483       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 05:48:31.461503       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0407 05:48:31.488845       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-twflw" condition "Approved" to 2026-04-07 05:48:31.488833043 +0000 UTC m=+13.251780134
I0407 05:48:31.501862       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-twflw" condition "Ready" to 2026-04-07 05:48:31.501855817 +0000 UTC m=+13.264802878
I0407 05:48:31.521979       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:48:31.52197182 +0000 UTC m=+13.284918881
I0407 05:48:31.543929       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:36.461908       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:48:36.46189557 +0000 UTC m=+18.224842661
I0407 05:48:58.588619       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:48:58.588607046 +0000 UTC m=+40.351554097
I0407 05:48:58.589017       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 05:48:58.591360       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:48:58.591326591 +0000 UTC m=+40.354273742
I0407 05:48:58.605028       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 05:48:58.605016376 +0000 UTC m=+40.367963437
I0407 05:48:58.619977       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:58.620145       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 05:48:58.620218       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:48:58.620209251 +0000 UTC m=+40.383156322
I0407 05:48:58.728160       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:58.740460       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ffg2b" condition "Approved" to 2026-04-07 05:48:58.74044905 +0000 UTC m=+40.503396121
I0407 05:48:58.772594       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ffg2b" condition "Ready" to 2026-04-07 05:48:58.772577574 +0000 UTC m=+40.535524655
I0407 05:48:58.802716       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:48:58.802696808 +0000 UTC m=+40.565643899
I0407 05:48:58.829113       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:58.829744       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:48:58.829699409 +0000 UTC m=+40.592646460
I0407 05:48:58.847909       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:58.850347       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:48:58.850917       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:48:58.850888864 +0000 UTC m=+40.613835925
I0407 05:53:15.602686       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 05:53:15.602750       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-04-07 05:53:15.602741738 +0000 UTC m=+297.365688819
I0407 05:53:15.603316       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-04-07 05:53:15.603308117 +0000 UTC m=+297.366255208
I0407 05:53:15.625953       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:53:15.626013       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-04-07 05:53:15.626005511 +0000 UTC m=+297.388952592
I0407 05:53:15.746272       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:53:15.770748       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-ll9ln" condition "Approved" to 2026-04-07 05:53:15.770729278 +0000 UTC m=+297.533676389
I0407 05:53:15.793700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-ll9ln" condition "Ready" to 2026-04-07 05:53:15.793689195 +0000 UTC m=+297.556636256
I0407 05:53:15.821801       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:15.821790391 +0000 UTC m=+297.584737462
I0407 05:53:15.840181       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 05:53:15.879566       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"