I0423 00:12:30.414933       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0423 00:12:30.415054       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0423 00:12:30.415139       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0423 00:12:30.421877       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0423 00:12:30.422405       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0423 00:12:30.422509       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0423 00:12:30.422631       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0423 00:12:30.425232       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0423 00:12:30.551012       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0423 00:12:30.557334       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0423 00:12:30.557357       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0423 00:12:30.557514       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0423 00:12:30.560178       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0423 00:12:30.562810       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0423 00:12:30.565544       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0423 00:12:30.570454       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0423 00:12:30.570495       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0423 00:12:30.570509       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0423 00:12:30.573144       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0423 00:12:30.575433       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0423 00:12:30.577712       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0423 00:12:30.580087       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0423 00:12:30.582572       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0423 00:12:30.584368       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0423 00:12:30.585918       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0423 00:12:30.587869       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0423 00:12:30.587904       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0423 00:12:30.592236       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0423 00:12:30.594855       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0423 00:12:30.597319       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0423 00:12:30.599719       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0423 00:12:30.602093       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0423 00:12:30.602324       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0423 00:12:30.605800       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.606296       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.606444       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.606687       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.679343       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.797591       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.798436       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.798665       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.798663       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:30.799888       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0423 00:12:42.981982       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 00:12:42.981950475 +0000 UTC m=+12.604421667
I0423 00:12:43.771457       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 00:12:43.771441603 +0000 UTC m=+13.393912775
I0423 00:12:43.771491       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0423 00:12:43.771733       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 00:12:43.771721637 +0000 UTC m=+13.394192809
E0423 00:12:43.894974       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0423 00:12:43.895107       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 00:12:43.895054465 +0000 UTC m=+13.517525647
E0423 00:12:43.895218       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0423 00:12:43.900292       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:12:43.900542       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 00:12:43.900530152 +0000 UTC m=+13.523001324
E0423 00:12:43.909906       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0423 00:12:43.910159       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0423 00:12:43.910208       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0423 00:12:43.910254       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0423 00:12:43.924566       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:12:43.924642       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 00:12:43.924631582 +0000 UTC m=+13.547102734
I0423 00:12:43.926463       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s6q5k" condition "Approved" to 2026-04-23 00:12:43.926455114 +0000 UTC m=+13.548926276
I0423 00:12:43.970057       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s6q5k" condition "Ready" to 2026-04-23 00:12:43.970045661 +0000 UTC m=+13.592516803
I0423 00:12:44.030686       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:12:44.030677017 +0000 UTC m=+13.653148169
I0423 00:12:44.047927       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:12:44.048175       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:12:44.048170416 +0000 UTC m=+13.670641568
I0423 00:12:44.060409       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:12:44.062500       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:12:48.911139       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:12:48.911129351 +0000 UTC m=+18.533600503
I0423 00:13:11.101702       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0423 00:13:11.101715       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 00:13:11.101705134 +0000 UTC m=+40.724176286
I0423 00:13:11.101743       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 00:13:11.101737455 +0000 UTC m=+40.724208607
I0423 00:13:11.132097       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 00:13:11.132083477 +0000 UTC m=+40.754554619
I0423 00:13:11.134862       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:13:11.134954       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0423 00:13:11.134980       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 00:13:11.134973829 +0000 UTC m=+40.757444981
I0423 00:13:11.305806       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:13:11.318238       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6qbqs" condition "Approved" to 2026-04-23 00:13:11.318221894 +0000 UTC m=+40.940693046
I0423 00:13:11.351790       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6qbqs" condition "Ready" to 2026-04-23 00:13:11.351776572 +0000 UTC m=+40.974247724
I0423 00:13:11.388644       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:13:11.388624238 +0000 UTC m=+41.011095390
I0423 00:13:11.407797       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:13:11.409566       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:13:11.409551273 +0000 UTC m=+41.032022415
I0423 00:13:11.442263       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:17:38.720660       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0423 00:17:38.720698       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-04-23 00:17:38.720689835 +0000 UTC m=+308.343161007
I0423 00:17:38.720765       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-04-23 00:17:38.720752726 +0000 UTC m=+308.343223888
I0423 00:17:38.759550       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0423 00:17:38.759639       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0423 00:17:38.759663       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-04-23 00:17:38.759654215 +0000 UTC m=+308.382125397
I0423 00:17:38.920873       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-7twpx" condition "Approved" to 2026-04-23 00:17:38.92085882 +0000 UTC m=+308.543329992
I0423 00:17:38.947516       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-7twpx" condition "Ready" to 2026-04-23 00:17:38.947506639 +0000 UTC m=+308.569977791
I0423 00:17:38.976325       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:17:38.976314555 +0000 UTC m=+308.598785707
I0423 00:17:38.996100       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"