I0421 19:13:44.717382       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0421 19:13:44.717576       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0421 19:13:44.717882       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0421 19:13:44.723094       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0421 19:13:44.723432       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0421 19:13:44.723552       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0421 19:13:44.723693       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0421 19:13:44.725339       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0421 19:13:44.743236       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0421 19:13:44.748443       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0421 19:13:44.751579       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0421 19:13:44.759392       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0421 19:13:44.761969       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0421 19:13:44.763615       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0421 19:13:44.765383       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0421 19:13:44.767141       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0421 19:13:44.769250       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0421 19:13:44.769281       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0421 19:13:44.769288       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0421 19:13:44.769335       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0421 19:13:44.773214       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0421 19:13:44.776733       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0421 19:13:44.778708       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0421 19:13:44.778733       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0421 19:13:44.778741       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0421 19:13:44.778941       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0421 19:13:44.780929       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0421 19:13:44.783238       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0421 19:13:44.785260       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0421 19:13:44.787376       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0421 19:13:44.789573       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0421 19:13:44.791702       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0421 19:13:44.797438       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0421 19:13:44.802345       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.802437       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.803013       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.803563       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.820787       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.838692       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.854525       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.871621       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.881037       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:44.889738       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 19:13:54.947305       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 19:13:54.947271649 +0000 UTC m=+10.261373861
I0421 19:13:55.751329       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 19:13:55.751305022 +0000 UTC m=+11.065407264
I0421 19:13:55.751862       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 19:13:55.751907       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 19:13:55.751898946 +0000 UTC m=+11.066001168
I0421 19:13:55.766763       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:13:55.766823       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 19:13:55.766841       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 19:13:55.766835954 +0000 UTC m=+11.080938176
E0421 19:13:55.770379       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0421 19:13:55.770429       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 19:13:55.770424237 +0000 UTC m=+11.084526449
E0421 19:13:55.770462       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 19:13:55.782739       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0421 19:13:55.783286       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 19:13:55.783441       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 19:13:55.783604       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0421 19:13:55.800480       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m6gkn" condition "Approved" to 2026-04-21 19:13:55.800464244 +0000 UTC m=+11.114566466
I0421 19:13:55.812313       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m6gkn" condition "Ready" to 2026-04-21 19:13:55.812304131 +0000 UTC m=+11.126406343
I0421 19:13:55.830078       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:13:55.830067997 +0000 UTC m=+11.144170229
I0421 19:13:55.847786       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:13:55.847984       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:13:55.847977585 +0000 UTC m=+11.162079797
I0421 19:13:55.863203       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:13:55.866960       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:14:00.783707       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:14:00.783687903 +0000 UTC m=+16.097790155
I0421 19:14:23.043580       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 19:14:23.043764       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 19:14:23.043751364 +0000 UTC m=+38.357853616
I0421 19:14:23.045861       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 19:14:23.045843631 +0000 UTC m=+38.359945853
I0421 19:14:23.058792       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 19:14:23.058777569 +0000 UTC m=+38.372879791
I0421 19:14:23.071352       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:14:23.072497       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 19:14:23.072639       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 19:14:23.072632231 +0000 UTC m=+38.386734443
I0421 19:14:23.472755       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:14:23.476459       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7rf4m" condition "Approved" to 2026-04-21 19:14:23.476445106 +0000 UTC m=+38.790547348
I0421 19:14:23.509463       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7rf4m" condition "Ready" to 2026-04-21 19:14:23.509449656 +0000 UTC m=+38.823551888
I0421 19:14:23.542597       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:14:23.542585631 +0000 UTC m=+38.856687853
I0421 19:14:23.563872       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:19:34.120798       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-21 19:19:34.12076188 +0000 UTC m=+349.434864122
I0421 19:19:34.121110       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 19:19:34.121145       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-21 19:19:34.12113907 +0000 UTC m=+349.435241282
I0421 19:19:34.137160       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:19:34.137224       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-21 19:19:34.137217191 +0000 UTC m=+349.451319413
I0421 19:19:34.621596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:19:34.654561       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-bglqh" condition "Approved" to 2026-04-21 19:19:34.65452116 +0000 UTC m=+349.968623412
I0421 19:19:34.685004       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-bglqh" condition "Ready" to 2026-04-21 19:19:34.684994158 +0000 UTC m=+349.999096380
I0421 19:19:34.715089       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:19:34.715079715 +0000 UTC m=+350.029181927
I0421 19:19:34.734538       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:19:34.734875       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:19:34.734869756 +0000 UTC m=+350.048971968
I0421 19:19:34.750001       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 19:19:34.750327       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 19:19:34.750318871 +0000 UTC m=+350.064421083