I0416 06:06:52.465876       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0416 06:06:52.466132       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0416 06:06:52.466319       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0416 06:06:52.474198       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0416 06:06:52.474844       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0416 06:06:52.474912       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0416 06:06:52.475073       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0416 06:06:52.478849       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0416 06:06:52.494079       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0416 06:06:52.499083       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0416 06:06:52.501686       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0416 06:06:52.506456       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0416 06:06:52.506562       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0416 06:06:52.509988       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0416 06:06:52.512757       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0416 06:06:52.515096       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0416 06:06:52.515120       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0416 06:06:52.515180       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0416 06:06:52.517156       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0416 06:06:52.518860       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0416 06:06:52.521543       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0416 06:06:52.527461       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0416 06:06:52.527499       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0416 06:06:52.527572       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0416 06:06:52.531034       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0416 06:06:52.533322       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0416 06:06:52.535762       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0416 06:06:52.537996       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0416 06:06:52.540386       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0416 06:06:52.542715       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0416 06:06:52.542776       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0416 06:06:52.544627       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0416 06:06:52.549124       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0416 06:06:52.551054       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.551652       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.551920       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.552513       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.552536       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.552603       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.552740       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.553517       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.553892       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:06:52.638515       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 06:07:04.474958       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 06:07:04.474938756 +0000 UTC m=+12.042020247
I0416 06:07:05.220308       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 06:07:05.220289245 +0000 UTC m=+12.787370776
I0416 06:07:05.221640       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 06:07:05.221683       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 06:07:05.22167377 +0000 UTC m=+12.788755271
E0416 06:07:05.235183       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 06:07:05.235229       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 06:07:05.235223922 +0000 UTC m=+12.802305393
E0416 06:07:05.235248       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 06:07:05.239211       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:05.239288       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 06:07:05.239279602 +0000 UTC m=+12.806361093
E0416 06:07:05.244260       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0416 06:07:05.244318       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 06:07:05.244340       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 06:07:05.244373       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0416 06:07:05.257403       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:05.280476       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5h9lh" condition "Approved" to 2026-04-16 06:07:05.280463603 +0000 UTC m=+12.847545094
I0416 06:07:05.293877       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5h9lh" condition "Ready" to 2026-04-16 06:07:05.293867712 +0000 UTC m=+12.860949173
I0416 06:07:05.314448       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:05.314436027 +0000 UTC m=+12.881517498
I0416 06:07:05.333532       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:05.333901       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:05.333888935 +0000 UTC m=+12.900970436
I0416 06:07:05.349943       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:05.357351       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:10.245328       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:10.245313525 +0000 UTC m=+17.812394996
I0416 06:07:29.342306       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 06:07:29.342278756 +0000 UTC m=+36.909360257
I0416 06:07:29.342575       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 06:07:29.342716       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 06:07:29.342675386 +0000 UTC m=+36.909756857
I0416 06:07:29.352911       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 06:07:29.352895189 +0000 UTC m=+36.919976660
I0416 06:07:29.378205       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:29.378288       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 06:07:29.378336       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 06:07:29.378327516 +0000 UTC m=+36.945408977
I0416 06:07:29.691613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:29.695372       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xmlgt" condition "Approved" to 2026-04-16 06:07:29.695358243 +0000 UTC m=+37.262439714
I0416 06:07:29.735899       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xmlgt" condition "Ready" to 2026-04-16 06:07:29.735885103 +0000 UTC m=+37.302966574
I0416 06:07:29.782387       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:29.782368742 +0000 UTC m=+37.349450223
I0416 06:07:29.816569       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:29.817008       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:29.816994286 +0000 UTC m=+37.384075767
I0416 06:07:29.837341       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:07:29.837800       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:29.83778969 +0000 UTC m=+37.404871191
I0416 06:07:29.838227       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:11:58.680454       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-04-16 06:11:58.680431829 +0000 UTC m=+306.247513300
I0416 06:11:58.680854       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 06:11:58.680879       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-16 06:11:58.68087489 +0000 UTC m=+306.247956361
I0416 06:11:58.702897       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:11:58.702998       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 06:11:58.703020       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-16 06:11:58.703011302 +0000 UTC m=+306.270092793
I0416 06:11:59.037234       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-s4x87" condition "Approved" to 2026-04-16 06:11:59.037217757 +0000 UTC m=+306.604299248
I0416 06:11:59.065385       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-s4x87" condition "Ready" to 2026-04-16 06:11:59.065365694 +0000 UTC m=+306.632447165
I0416 06:11:59.104187       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:11:59.104176629 +0000 UTC m=+306.671258100
I0416 06:11:59.126901       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:11:59.127214       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:11:59.127206423 +0000 UTC m=+306.694287894
I0416 06:11:59.139736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:11:59.140613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 06:11:59.141010       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:11:59.140996455 +0000 UTC m=+306.708077956