I0630 17:03:19.882106       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0630 17:03:19.883261       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0630 17:03:19.883415       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0630 17:03:19.888433       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0630 17:03:19.889098       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0630 17:03:19.889116       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0630 17:03:19.889330       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0630 17:03:19.893298       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0630 17:03:19.904479       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0630 17:03:19.910048       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0630 17:03:19.915405       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0630 17:03:19.917258       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0630 17:03:19.917283       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0630 17:03:19.917292       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0630 17:03:19.917300       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0630 17:03:19.917366       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0630 17:03:19.919405       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0630 17:03:19.921242       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0630 17:03:19.922952       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0630 17:03:19.924760       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0630 17:03:19.929169       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0630 17:03:19.933885       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0630 17:03:19.936745       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0630 17:03:19.939256       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0630 17:03:19.939345       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0630 17:03:19.941864       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0630 17:03:19.943826       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0630 17:03:19.945677       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0630 17:03:19.947294       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0630 17:03:19.949157       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0630 17:03:19.956265       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0630 17:03:19.956323       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0630 17:03:19.960276       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0630 17:03:19.962072       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:19.963873       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:19.964390       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:19.981633       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:19.997096       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:20.008604       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:20.025960       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:20.038470       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:20.039930       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:20.057166       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0630 17:03:39.133556       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 17:03:39.133545556 +0000 UTC m=+19.283445000
I0630 17:03:39.834694       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:03:39.834679833 +0000 UTC m=+19.984579307
I0630 17:03:39.835617       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0630 17:03:39.835651       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:03:39.835643338 +0000 UTC m=+19.985542822
E0630 17:03:39.851750       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0630 17:03:39.851828       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 17:03:39.851823241 +0000 UTC m=+20.001722695
E0630 17:03:39.851869       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0630 17:03:39.855355       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:03:39.855411       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:03:39.855406158 +0000 UTC m=+20.005305612
E0630 17:03:39.864188       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0630 17:03:39.864274       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0630 17:03:39.864300       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0630 17:03:39.864333       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0630 17:03:39.874788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:03:39.901303       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9jrm2" condition "Approved" to 2026-06-30 17:03:39.901293233 +0000 UTC m=+20.051192677
I0630 17:03:39.912166       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9jrm2" condition "Ready" to 2026-06-30 17:03:39.912153529 +0000 UTC m=+20.062052993
I0630 17:03:39.935095       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:03:39.935079991 +0000 UTC m=+20.084979475
I0630 17:03:39.954623       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:03:39.992437       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:03:44.865009       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:03:44.864995103 +0000 UTC m=+25.014894577
I0630 17:04:07.261271       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:04:07.261258933 +0000 UTC m=+47.411158367
I0630 17:04:07.261554       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0630 17:04:07.261569       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:04:07.261566698 +0000 UTC m=+47.411466132
I0630 17:04:07.273410       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 17:04:07.273398259 +0000 UTC m=+47.423297713
I0630 17:04:07.286803       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:04:07.287350       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:04:07.28734232 +0000 UTC m=+47.437241794
I0630 17:04:07.409081       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:04:07.441719       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dxhpr" condition "Approved" to 2026-06-30 17:04:07.441707925 +0000 UTC m=+47.591607389
I0630 17:04:07.478681       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dxhpr" condition "Ready" to 2026-06-30 17:04:07.478665213 +0000 UTC m=+47.628564687
I0630 17:04:07.509711       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:04:07.509699177 +0000 UTC m=+47.659598631
I0630 17:04:07.531760       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:04:07.532044       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:04:07.532038324 +0000 UTC m=+47.681937758
I0630 17:04:07.539101       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:04:07.555889       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:04:07.556170       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:04:07.556164674 +0000 UTC m=+47.706064118
I0630 17:08:09.767817       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0630 17:08:09.767848       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-06-30 17:08:09.767841922 +0000 UTC m=+289.917741366
I0630 17:08:09.768266       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-06-30 17:08:09.768261789 +0000 UTC m=+289.918161233
I0630 17:08:09.784627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:08:09.784693       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-06-30 17:08:09.784686817 +0000 UTC m=+289.934586271
I0630 17:08:10.185442       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:08:10.219814       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-x452g" condition "Approved" to 2026-06-30 17:08:10.219800719 +0000 UTC m=+290.369700203
I0630 17:08:10.243181       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-x452g" condition "Ready" to 2026-06-30 17:08:10.243172562 +0000 UTC m=+290.393071996
I0630 17:08:10.266848       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:08:10.266832959 +0000 UTC m=+290.416732433
I0630 17:08:10.287661       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:08:10.288118       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:08:10.288111493 +0000 UTC m=+290.438010947
I0630 17:08:10.301346       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0630 17:08:10.301571       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:08:10.301566387 +0000 UTC m=+290.451465841