I0407 05:42:30.931414 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 05:42:30.931525 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 05:42:30.931589 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 05:42:30.934680 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 05:42:30.935013 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 05:42:30.935139 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 05:42:30.935148 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 05:42:30.937903 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 05:42:30.952551 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 05:42:30.957798 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 05:42:30.957848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 05:42:30.966099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 05:42:30.968792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 05:42:30.971251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 05:42:30.973098 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 05:42:30.973118 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 05:42:30.973124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 05:42:30.973272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 05:42:30.974913 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 05:42:30.975136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 05:42:30.976852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 05:42:30.982098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 05:42:30.986397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 05:42:30.990264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 05:42:30.992818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 05:42:30.994410 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 05:42:30.994522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 05:42:30.996345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 05:42:30.998010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 05:42:30.999955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 05:42:31.001853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 05:42:31.005760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 05:42:31.010748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 05:42:31.013247 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.013490 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.013901 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.030636 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.046561 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.060319 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.096902 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.099731 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.113054 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:31.131181 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:42:47.175361 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 05:42:47.175326308 +0000 UTC m=+16.279218572 I0407 05:42:47.915167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:42:47.915233 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 05:42:47.915222456 +0000 UTC m=+17.019114730 I0407 05:42:47.916406 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:42:47.916396878 +0000 UTC m=+17.020289152 E0407 05:42:47.930685 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:42:47.930867 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 05:42:47.930858494 +0000 UTC m=+17.034750728 E0407 05:42:47.930969 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:42:47.931621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:42:47.931678 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:42:47.931670466 +0000 UTC m=+17.035562740 I0407 05:42:47.950608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:42:47.950660 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:42:47.950654092 +0000 UTC m=+17.054546336 E0407 05:42:47.955011 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 05:42:47.955554 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:42:47.955648 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:42:47.955746 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 05:42:47.958205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fmlr" condition "Approved" to 2026-04-07 05:42:47.958178473 +0000 UTC m=+17.062070717 I0407 05:42:47.971432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fmlr" condition "Ready" to 2026-04-07 05:42:47.971420437 +0000 UTC m=+17.075312681 I0407 05:42:47.994527 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:42:47.994516653 +0000 UTC m=+17.098408917 I0407 05:42:48.014448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:42:48.015571 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:42:48.015566429 +0000 UTC m=+17.119458653 I0407 05:42:48.027225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:42:48.030011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:42:52.956495 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:42:52.956481944 +0000 UTC m=+22.060374208 I0407 05:43:15.215413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:43:15.215486 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:43:15.215478844 +0000 UTC m=+44.319371088 I0407 05:43:15.216123 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:43:15.216105477 +0000 UTC m=+44.319997761 I0407 05:43:15.228996 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 05:43:15.22898526 +0000 UTC m=+44.332877494 I0407 05:43:15.246221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:43:15.248422 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:43:15.248396797 +0000 UTC m=+44.352289131 I0407 05:43:15.733424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:43:15.772583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z9xgz" condition "Approved" to 2026-04-07 05:43:15.77256618 +0000 UTC m=+44.876458454 I0407 05:43:15.805477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z9xgz" condition "Ready" to 2026-04-07 05:43:15.805467751 +0000 UTC m=+44.909359985 I0407 05:43:15.835888 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:43:15.835876402 +0000 UTC m=+44.939768646 I0407 05:43:15.863018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:43:15.863227 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:43:15.863222241 +0000 UTC m=+44.967114475 I0407 05:43:15.888083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:43:15.888702 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:43:15.888694531 +0000 UTC m=+44.992586765 I0407 05:47:17.372057 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready" to 2026-04-07 05:47:17.372028054 +0000 UTC m=+286.475920298 I0407 05:47:17.372150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-221.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:47:17.372218 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Issuing" to 2026-04-07 05:47:17.372209442 +0000 UTC m=+286.476101716 I0407 05:47:17.391118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:17.391174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready" to 2026-04-07 05:47:17.391168236 +0000 UTC m=+286.495060470 I0407 05:47:17.511814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:17.538678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-221.nip.io-tls-mth49" condition "Approved" to 2026-04-07 05:47:17.538662425 +0000 UTC m=+286.642554699 I0407 05:47:17.563303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-221.nip.io-tls-mth49" condition "Ready" to 2026-04-07 05:47:17.563292867 +0000 UTC m=+286.667185111 I0407 05:47:17.587197 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:17.587185911 +0000 UTC m=+286.691078195 I0407 05:47:17.608230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:17.608553 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:17.608547953 +0000 UTC m=+286.712440187 I0407 05:47:17.625664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"