I0407 09:37:02.809261       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0407 09:37:02.809357       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0407 09:37:02.809427       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0407 09:37:02.814995       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0407 09:37:02.815534       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0407 09:37:02.815550       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0407 09:37:02.815599       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0407 09:37:02.820155       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0407 09:37:02.832587       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0407 09:37:02.836899       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0407 09:37:02.839349       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0407 09:37:02.845534       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0407 09:37:02.847558       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0407 09:37:02.849381       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0407 09:37:02.851163       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0407 09:37:02.852794       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0407 09:37:02.852831       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0407 09:37:02.852912       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0407 09:37:02.854700       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0407 09:37:02.856358       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0407 09:37:02.860401       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0407 09:37:02.864543       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0407 09:37:02.866968       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0407 09:37:02.867029       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0407 09:37:02.867055       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0407 09:37:02.867061       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0407 09:37:02.869685       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0407 09:37:02.872088       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0407 09:37:02.874584       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0407 09:37:02.876666       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0407 09:37:02.876918       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0407 09:37:02.878658       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0407 09:37:02.881062       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0407 09:37:02.886996       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.887379       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.888546       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.905389       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.926862       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.939032       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.953875       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.967484       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.970616       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:02.989064       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 09:37:15.860053       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 09:37:15.860037163 +0000 UTC m=+13.079093230
I0407 09:37:16.608256       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 09:37:16.608242986 +0000 UTC m=+13.827299053
I0407 09:37:16.609540       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 09:37:16.609580       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 09:37:16.609573572 +0000 UTC m=+13.828629639
E0407 09:37:16.626235       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 09:37:16.626316       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 09:37:16.62630952 +0000 UTC m=+13.845365557
E0407 09:37:16.626342       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 09:37:16.630791       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:16.630873       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 09:37:16.630865827 +0000 UTC m=+13.849921864
E0407 09:37:16.643592       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0407 09:37:16.643844       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 09:37:16.643870       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 09:37:16.643973       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0407 09:37:16.648312       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:16.666949       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-26m7q" condition "Approved" to 2026-04-07 09:37:16.666941974 +0000 UTC m=+13.885998001
I0407 09:37:16.680235       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-26m7q" condition "Ready" to 2026-04-07 09:37:16.680223068 +0000 UTC m=+13.899279105
I0407 09:37:16.701094       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:37:16.701081183 +0000 UTC m=+13.920137220
I0407 09:37:16.726044       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:16.726371       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:37:16.726364366 +0000 UTC m=+13.945420403
I0407 09:37:16.738783       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:16.739159       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:37:16.739151177 +0000 UTC m=+13.958207214
I0407 09:37:16.740156       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:21.644130       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:37:21.644117464 +0000 UTC m=+18.863173521
I0407 09:37:44.823443       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 09:37:44.823393593 +0000 UTC m=+42.042449640
I0407 09:37:44.823793       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 09:37:44.823880       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 09:37:44.823872052 +0000 UTC m=+42.042928089
I0407 09:37:44.840732       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 09:37:44.840715619 +0000 UTC m=+42.059771646
I0407 09:37:44.856093       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:44.856236       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 09:37:44.856163172 +0000 UTC m=+42.075219199
I0407 09:37:45.198875       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:45.234064       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n4tlv" condition "Approved" to 2026-04-07 09:37:45.234043554 +0000 UTC m=+42.453099601
I0407 09:37:45.273597       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n4tlv" condition "Ready" to 2026-04-07 09:37:45.273582371 +0000 UTC m=+42.492638408
I0407 09:37:45.304479       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:37:45.304465089 +0000 UTC m=+42.523521146
I0407 09:37:45.328215       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:37:45.387207       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:42:07.318639       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 09:42:07.318707       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-07 09:42:07.318691586 +0000 UTC m=+304.537747623
I0407 09:42:07.318672       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-07 09:42:07.318665335 +0000 UTC m=+304.537721382
I0407 09:42:07.334424       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:42:07.334506       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-07 09:42:07.334497964 +0000 UTC m=+304.553554001
I0407 09:42:07.438065       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:42:07.466192       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-v9rx7" condition "Approved" to 2026-04-07 09:42:07.466182522 +0000 UTC m=+304.685238559
I0407 09:42:07.493646       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-v9rx7" condition "Ready" to 2026-04-07 09:42:07.493632661 +0000 UTC m=+304.712688718
I0407 09:42:07.525343       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:42:07.525329338 +0000 UTC m=+304.744385375
I0407 09:42:07.542814       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:42:07.543372       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:42:07.543362998 +0000 UTC m=+304.762419055
I0407 09:42:07.566428       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 09:42:07.566669       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:42:07.566662059 +0000 UTC m=+304.785718096
I0407 09:42:07.572410       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0407 09:43:25.868835       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out