I0615 15:43:49.150358       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0615 15:43:49.150548       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0615 15:43:49.150672       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0615 15:43:49.157547       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0615 15:43:49.160678       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0615 15:43:49.160862       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0615 15:43:49.161026       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0615 15:43:49.164247       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0615 15:43:49.181002       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0615 15:43:49.187781       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0615 15:43:49.191691       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0615 15:43:49.194502       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0615 15:43:49.194588       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0615 15:43:49.198166       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0615 15:43:49.198261       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0615 15:43:49.200386       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0615 15:43:49.202247       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0615 15:43:49.204086       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0615 15:43:49.206150       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0615 15:43:49.208098       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0615 15:43:49.209516       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0615 15:43:49.209554       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0615 15:43:49.216803       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0615 15:43:49.219784       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0615 15:43:49.222293       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0615 15:43:49.224768       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0615 15:43:49.227178       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0615 15:43:49.227218       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0615 15:43:49.229015       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0615 15:43:49.229033       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0615 15:43:49.229078       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0615 15:43:49.231944       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0615 15:43:49.234582       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0615 15:43:49.241363       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.242182       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.243616       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.257214       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.279312       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.292003       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.310416       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.323705       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.329667       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:43:49.343162       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0615 15:44:01.864160       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 15:44:01.864136568 +0000 UTC m=+12.746131810
I0615 15:44:02.591625       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 15:44:02.591607564 +0000 UTC m=+13.473602835
I0615 15:44:02.591931       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:44:02.592035       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 15:44:02.592025786 +0000 UTC m=+13.474021027
E0615 15:44:02.609426       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0615 15:44:02.609479       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 15:44:02.609472691 +0000 UTC m=+13.491467912
E0615 15:44:02.609500       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0615 15:44:02.612329       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:02.612447       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:44:02.612488       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 15:44:02.612463537 +0000 UTC m=+13.494458758
E0615 15:44:02.623420       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0615 15:44:02.623721       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0615 15:44:02.623757       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0615 15:44:02.623787       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0615 15:44:02.652061       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:02.660781       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t6lwc" condition "Approved" to 2026-06-15 15:44:02.660773245 +0000 UTC m=+13.542768456
I0615 15:44:02.673841       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t6lwc" condition "Ready" to 2026-06-15 15:44:02.673828963 +0000 UTC m=+13.555824194
I0615 15:44:02.696016       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:02.695985134 +0000 UTC m=+13.577980355
I0615 15:44:02.715898       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:02.716340       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:02.716333883 +0000 UTC m=+13.598329094
I0615 15:44:02.729598       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:02.729778       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:02.729771902 +0000 UTC m=+13.611767113
I0615 15:44:02.734338       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:07.623723       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:07.623713792 +0000 UTC m=+18.505709003
I0615 15:44:30.430088       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 15:44:30.430047624 +0000 UTC m=+41.312042875
I0615 15:44:30.430190       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:44:30.430408       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 15:44:30.430393502 +0000 UTC m=+41.312388783
I0615 15:44:30.484446       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 15:44:30.484430077 +0000 UTC m=+41.366425288
I0615 15:44:30.617181       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:30.617227       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:44:30.617241       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 15:44:30.617236333 +0000 UTC m=+41.499231544
I0615 15:44:31.127564       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:31.136770       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h4f52" condition "Approved" to 2026-06-15 15:44:31.136753646 +0000 UTC m=+42.018748897
I0615 15:44:31.169596       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h4f52" condition "Ready" to 2026-06-15 15:44:31.169583921 +0000 UTC m=+42.051579142
I0615 15:44:31.203639       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:31.203628274 +0000 UTC m=+42.085623495
I0615 15:44:31.227994       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:31.228377       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:44:31.228370345 +0000 UTC m=+42.110365576
I0615 15:44:31.236952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:44:31.248874       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:48:28.027422       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-06-15 15:48:28.027378005 +0000 UTC m=+278.909373256
I0615 15:48:28.027555       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:48:28.027595       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-06-15 15:48:28.027590701 +0000 UTC m=+278.909585922
I0615 15:48:28.045859       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:48:28.045944       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0615 15:48:28.045959       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-06-15 15:48:28.045953951 +0000 UTC m=+278.927949162
I0615 15:48:28.205719       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-r8hj6" condition "Approved" to 2026-06-15 15:48:28.205699778 +0000 UTC m=+279.087695019
I0615 15:48:28.239616       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-r8hj6" condition "Ready" to 2026-06-15 15:48:28.239604874 +0000 UTC m=+279.121600085
I0615 15:48:28.268720       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:48:28.268707286 +0000 UTC m=+279.150702507
I0615 15:48:28.288375       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0615 15:48:28.333913       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"