I0422 23:17:44.475694       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0422 23:17:44.475801       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0422 23:17:44.475875       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0422 23:17:44.479072       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0422 23:17:44.479384       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0422 23:17:44.479443       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0422 23:17:44.479519       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0422 23:17:44.484051       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0422 23:17:44.496194       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0422 23:17:44.499647       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0422 23:17:44.502330       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0422 23:17:44.502359       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0422 23:17:44.502376       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0422 23:17:44.502439       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0422 23:17:44.505425       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0422 23:17:44.513957       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0422 23:17:44.516963       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0422 23:17:44.517096       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0422 23:17:44.519118       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0422 23:17:44.520803       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0422 23:17:44.522467       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0422 23:17:44.527717       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0422 23:17:44.530383       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0422 23:17:44.530468       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0422 23:17:44.531315       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0422 23:17:44.536338       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0422 23:17:44.540034       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0422 23:17:44.543201       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0422 23:17:44.545044       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0422 23:17:44.546782       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0422 23:17:44.548783       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0422 23:17:44.550567       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0422 23:17:44.552728       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0422 23:17:44.553675       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.554539       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.554791       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.572146       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.592443       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.600351       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.611526       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.624408       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.636941       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:44.638224       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0422 23:17:56.946700       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 23:17:56.946677361 +0000 UTC m=+12.499829151
I0422 23:17:57.684360       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0422 23:17:57.684498       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 23:17:57.684487924 +0000 UTC m=+13.237639714
I0422 23:17:57.685425       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 23:17:57.685417634 +0000 UTC m=+13.238569414
E0422 23:17:57.701566       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0422 23:17:57.701655       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 23:17:57.701644969 +0000 UTC m=+13.254796729
E0422 23:17:57.701720       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0422 23:17:57.705694       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:17:57.705799       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0422 23:17:57.705838       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 23:17:57.705828744 +0000 UTC m=+13.258980534
E0422 23:17:57.713768       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0422 23:17:57.714498       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0422 23:17:57.714575       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0422 23:17:57.714641       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0422 23:17:57.745933       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:17:57.749542       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ghqnl" condition "Approved" to 2026-04-22 23:17:57.749525044 +0000 UTC m=+13.302676804
I0422 23:17:57.766141       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ghqnl" condition "Ready" to 2026-04-22 23:17:57.766125233 +0000 UTC m=+13.319277023
I0422 23:17:57.791286       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:17:57.791272553 +0000 UTC m=+13.344424313
I0422 23:17:57.811162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:17:57.811504       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:17:57.811496881 +0000 UTC m=+13.364648641
I0422 23:17:57.822633       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:17:57.822894       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:17:57.822886863 +0000 UTC m=+13.376038623
I0422 23:17:57.828684       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:18:02.714547       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:18:02.714537026 +0000 UTC m=+18.267688786
I0422 23:18:24.850570       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 23:18:24.85055115 +0000 UTC m=+40.403702900
I0422 23:18:24.850913       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0422 23:18:24.850929       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 23:18:24.850926588 +0000 UTC m=+40.404078338
I0422 23:18:24.862728       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 23:18:24.862716893 +0000 UTC m=+40.415868643
I0422 23:18:24.879574       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:18:24.879788       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 23:18:24.879778877 +0000 UTC m=+40.432930637
I0422 23:18:24.989226       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:18:25.018217       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4th4h" condition "Approved" to 2026-04-22 23:18:25.018179372 +0000 UTC m=+40.571331162
I0422 23:18:25.046186       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4th4h" condition "Ready" to 2026-04-22 23:18:25.046170321 +0000 UTC m=+40.599322101
I0422 23:18:25.073977       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:18:25.073965126 +0000 UTC m=+40.627116916
I0422 23:18:25.098389       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:18:25.152431       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:22:19.854173       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-04-22 23:22:19.85414877 +0000 UTC m=+275.407300530
I0422 23:22:19.854359       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0422 23:22:19.856168       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-04-22 23:22:19.856159034 +0000 UTC m=+275.409310794
I0422 23:22:19.875535       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:22:19.875768       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-04-22 23:22:19.875761407 +0000 UTC m=+275.428913167
I0422 23:22:20.441159       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0422 23:22:20.473317       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-gtd9s" condition "Approved" to 2026-04-22 23:22:20.473307832 +0000 UTC m=+276.026459582
I0422 23:22:20.503735       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-gtd9s" condition "Ready" to 2026-04-22 23:22:20.503721165 +0000 UTC m=+276.056872945
I0422 23:22:20.525936       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 23:22:20.525926411 +0000 UTC m=+276.079078171
I0422 23:22:20.545290       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"