I0509 16:52:15.494932       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0509 16:52:15.495071       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0509 16:52:15.495269       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0509 16:52:15.499312       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0509 16:52:15.499970       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0509 16:52:15.499968       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0509 16:52:15.500030       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0509 16:52:15.502740       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0509 16:52:15.521841       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0509 16:52:15.525341       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0509 16:52:15.525504       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0509 16:52:15.530174       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0509 16:52:15.534468       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0509 16:52:15.537274       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0509 16:52:15.539852       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0509 16:52:15.541903       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0509 16:52:15.543776       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0509 16:52:15.545877       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0509 16:52:15.550010       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0509 16:52:15.553761       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0509 16:52:15.553899       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0509 16:52:15.556712       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0509 16:52:15.559152       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0509 16:52:15.562180       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0509 16:52:15.562274       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0509 16:52:15.564912       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0509 16:52:15.566950       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0509 16:52:15.566996       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0509 16:52:15.568891       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0509 16:52:15.570757       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0509 16:52:15.570804       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0509 16:52:15.570845       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0509 16:52:15.574378       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0509 16:52:15.576683       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.580900       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.582384       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.583018       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.595965       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.616193       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.635705       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.656267       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.665817       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:15.692786       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 16:52:29.764679       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-09 16:52:29.764658511 +0000 UTC m=+14.313127238
I0509 16:52:30.700230       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-09 16:52:30.700212136 +0000 UTC m=+15.248680853
I0509 16:52:30.702029       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 16:52:30.702151       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 16:52:30.702109643 +0000 UTC m=+15.250578400
E0509 16:52:30.719736       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0509 16:52:30.719824       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-09 16:52:30.719816057 +0000 UTC m=+15.268284754
E0509 16:52:30.719847       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0509 16:52:30.721028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:52:30.721074       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 16:52:30.721087       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 16:52:30.721082393 +0000 UTC m=+15.269551090
E0509 16:52:30.731610       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0509 16:52:30.731824       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 16:52:30.731912       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 16:52:30.731977       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0509 16:52:30.778121       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:52:30.778415       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s85kf" condition "Approved" to 2026-05-09 16:52:30.778397099 +0000 UTC m=+15.326865816
I0509 16:52:30.796101       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s85kf" condition "Ready" to 2026-05-09 16:52:30.796092554 +0000 UTC m=+15.344561241
I0509 16:52:30.831432       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 16:52:30.831401011 +0000 UTC m=+15.379869708
I0509 16:52:30.850774       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:52:35.733429       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 16:52:35.733413275 +0000 UTC m=+20.281881992
I0509 16:53:01.284494       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-09 16:53:01.284477571 +0000 UTC m=+45.832946258
I0509 16:53:01.284795       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 16:53:01.284875       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 16:53:01.284863077 +0000 UTC m=+45.833331774
I0509 16:53:01.308751       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-09 16:53:01.308734484 +0000 UTC m=+45.857203171
I0509 16:53:01.314663       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:53:01.314771       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 16:53:01.314819       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 16:53:01.314798008 +0000 UTC m=+45.863266705
I0509 16:53:01.461437       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:53:01.471832       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-btdrp" condition "Approved" to 2026-05-09 16:53:01.471818216 +0000 UTC m=+46.020286903
I0509 16:53:01.513902       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-btdrp" condition "Ready" to 2026-05-09 16:53:01.513889934 +0000 UTC m=+46.062358621
I0509 16:53:01.542961       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 16:53:01.542940459 +0000 UTC m=+46.091409146
I0509 16:53:01.605047       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:53:01.612182       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 16:53:01.612171241 +0000 UTC m=+46.160639938
I0509 16:53:01.716250       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:58:52.467989       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 16:58:52.468061       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-09 16:58:52.468051868 +0000 UTC m=+397.016520565
I0509 16:58:52.468920       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-09 16:58:52.468903442 +0000 UTC m=+397.017372229
I0509 16:58:52.492123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:58:52.492208       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-09 16:58:52.492198513 +0000 UTC m=+397.040667240
I0509 16:58:52.656307       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:58:52.683619       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-2hqkp" condition "Approved" to 2026-05-09 16:58:52.683607066 +0000 UTC m=+397.232075763
I0509 16:58:52.719415       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-2hqkp" condition "Ready" to 2026-05-09 16:58:52.719402152 +0000 UTC m=+397.267870869
I0509 16:58:52.743340       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 16:58:52.743325811 +0000 UTC m=+397.291794508
I0509 16:58:52.780791       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 16:58:52.829613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"