I0504 01:34:30.955000 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0504 01:34:30.955211 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0504 01:34:30.955321 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0504 01:34:30.961172 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0504 01:34:30.961737 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0504 01:34:30.961744 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0504 01:34:30.961750 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0504 01:34:30.964926 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0504 01:34:30.982403 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0504 01:34:30.987324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0504 01:34:30.991622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0504 01:34:30.997786 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0504 01:34:30.997829 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0504 01:34:30.997913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0504 01:34:31.002382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0504 01:34:31.005897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0504 01:34:31.007803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0504 01:34:31.010198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0504 01:34:31.011835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0504 01:34:31.017982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0504 01:34:31.020507 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0504 01:34:31.020539 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0504 01:34:31.020556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0504 01:34:31.023112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0504 01:34:31.025427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0504 01:34:31.027309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0504 01:34:31.029031 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0504 01:34:31.030736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0504 01:34:31.032575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0504 01:34:31.036654 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0504 01:34:31.036746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0504 01:34:31.040875 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0504 01:34:31.041265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0504 01:34:31.043729 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.044916 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.046191 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.046924 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.062864 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.084718 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.097165 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.110671 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.125897 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:31.127122 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:34:41.081912 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-04 01:34:41.08189758 +0000 UTC m=+10.157116707 I0504 01:34:41.856179 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 01:34:41.856168316 +0000 UTC m=+10.931387443 I0504 01:34:41.857180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:34:41.857259 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 01:34:41.85724522 +0000 UTC m=+10.932464337 E0504 01:34:41.871340 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:34:41.871418 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-04 01:34:41.871406807 +0000 UTC m=+10.946625934 E0504 01:34:41.871474 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:34:41.873878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:34:41.874005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:34:41.874036 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 01:34:41.874026661 +0000 UTC m=+10.949245808 E0504 01:34:41.881288 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0504 01:34:41.881447 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:34:41.881513 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:34:41.881563 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0504 01:34:41.918113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gfdnp" condition "Approved" to 2026-05-04 01:34:41.91809111 +0000 UTC m=+10.993310267 I0504 01:34:41.931169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gfdnp" condition "Ready" to 2026-05-04 01:34:41.931140014 +0000 UTC m=+11.006359141 I0504 01:34:41.953772 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:34:41.953754953 +0000 UTC m=+11.028974080 I0504 01:34:41.972121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:34:42.011399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:34:46.882471 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:34:46.882449821 +0000 UTC m=+15.957668958 I0504 01:35:09.585062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:35:09.586049 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 01:35:09.58603679 +0000 UTC m=+38.661255907 I0504 01:35:09.585140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 01:35:09.585112056 +0000 UTC m=+38.660331203 I0504 01:35:09.600654 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-04 01:35:09.600636527 +0000 UTC m=+38.675855654 I0504 01:35:09.634774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:35:09.634992 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 01:35:09.634981917 +0000 UTC m=+38.710201054 I0504 01:35:09.806331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:35:09.844880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4ctxk" condition "Approved" to 2026-05-04 01:35:09.844852033 +0000 UTC m=+38.920071160 I0504 01:35:09.886765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4ctxk" condition "Ready" to 2026-05-04 01:35:09.886752544 +0000 UTC m=+38.961971651 I0504 01:35:09.919503 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:35:09.919483814 +0000 UTC m=+38.994702941 I0504 01:35:09.944634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:39.390482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:39:39.390533 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Issuing" to 2026-05-04 01:39:39.390520795 +0000 UTC m=+308.465739942 I0504 01:39:39.391025 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-05-04 01:39:39.391008598 +0000 UTC m=+308.466227725 I0504 01:39:39.428219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:39.428286 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-05-04 01:39:39.428278051 +0000 UTC m=+308.503497178 I0504 01:39:39.511675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:39.543737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-qttq5" condition "Approved" to 2026-05-04 01:39:39.543725157 +0000 UTC m=+308.618944284 I0504 01:39:39.582765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-qttq5" condition "Ready" to 2026-05-04 01:39:39.582748784 +0000 UTC m=+308.657967941 I0504 01:39:39.658176 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:39:39.658153288 +0000 UTC m=+308.733372445 I0504 01:39:39.703656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:46.266765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 01:40:46.266710779 +0000 UTC m=+375.341929906 I0504 01:40:46.267136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:40:46.267182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 01:40:46.267172183 +0000 UTC m=+375.342391310 E0504 01:40:46.285130 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:40:46.285122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:46.285180 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-04 01:40:46.285170605 +0000 UTC m=+375.360389732 E0504 01:40:46.285239 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:40:46.285435 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 01:40:46.285330643 +0000 UTC m=+375.360549770 E0504 01:40:46.301043 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0504 01:40:46.301168 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:40:46.301257 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:40:46.301293 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0504 01:40:46.305263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:46.324634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dwl8z" condition "Approved" to 2026-05-04 01:40:46.324616366 +0000 UTC m=+375.399835523 I0504 01:40:46.339107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dwl8z" condition "Ready" to 2026-05-04 01:40:46.33909009 +0000 UTC m=+375.414309237 I0504 01:40:46.364411 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:40:46.364397363 +0000 UTC m=+375.439616490 I0504 01:40:46.381895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:46.382151 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:40:46.382143417 +0000 UTC m=+375.457362544 I0504 01:40:46.389533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:46.399748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:51.302071 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:40:51.302054402 +0000 UTC m=+380.377273559 I0504 01:41:33.235640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:33.235675 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 01:41:33.235667328 +0000 UTC m=+422.310886445 I0504 01:41:33.236042 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 01:41:33.236021514 +0000 UTC m=+422.311240641 I0504 01:41:33.279717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:33.279750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 01:41:33.279743047 +0000 UTC m=+422.354962154 I0504 01:41:33.280092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:33.280144 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 01:41:33.280136073 +0000 UTC m=+422.355355190 I0504 01:41:33.280178 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 01:41:33.280174143 +0000 UTC m=+422.355393260 I0504 01:41:33.300069 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 01:41:33.300051136 +0000 UTC m=+422.375270253 I0504 01:41:33.307191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.307282 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 01:41:33.307273968 +0000 UTC m=+422.382493085 I0504 01:41:33.411206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.411291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:33.411341 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 01:41:33.411333424 +0000 UTC m=+422.486552541 I0504 01:41:33.425387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.425487 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 01:41:33.42547985 +0000 UTC m=+422.500698967 I0504 01:41:33.619063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.674923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5g9nj" condition "Approved" to 2026-05-04 01:41:33.674907582 +0000 UTC m=+422.750126699 I0504 01:41:33.706971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5g9nj" condition "Ready" to 2026-05-04 01:41:33.706961552 +0000 UTC m=+422.782180669 I0504 01:41:33.721668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.739750 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:33.739731055 +0000 UTC m=+422.814950202 I0504 01:41:33.756012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.757311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j48gs" condition "Approved" to 2026-05-04 01:41:33.757294553 +0000 UTC m=+422.832513670 I0504 01:41:33.783874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j48gs" condition "Ready" to 2026-05-04 01:41:33.783862014 +0000 UTC m=+422.859081131 I0504 01:41:33.799966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:33.809605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tlmb8" condition "Approved" to 2026-05-04 01:41:33.809576274 +0000 UTC m=+422.884795391 I0504 01:41:33.865857 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:33.865842261 +0000 UTC m=+422.941061378 I0504 01:41:33.882707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tlmb8" condition "Ready" to 2026-05-04 01:41:33.882691837 +0000 UTC m=+422.957910954 I0504 01:41:34.274604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:34.275014 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:34.275003808 +0000 UTC m=+423.350222935 I0504 01:41:34.627224 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:34.627206558 +0000 UTC m=+423.702425685 I0504 01:41:34.673545 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:34.673535244 +0000 UTC m=+423.748754391 I0504 01:41:34.725371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:34.776226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:34.823500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:34.924863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:34.925488 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:34.925475814 +0000 UTC m=+424.000694971 I0504 01:41:35.174082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:41.059710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:41.059745 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" condition "Ready" to 2026-05-04 01:41:41.059719213 +0000 UTC m=+430.134938340 I0504 01:41:41.059766 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" condition "Issuing" to 2026-05-04 01:41:41.059753852 +0000 UTC m=+430.134972969 I0504 01:41:41.077294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqt84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:41.077381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:41.077403 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" condition "Issuing" to 2026-05-04 01:41:41.077397043 +0000 UTC m=+430.152616160 I0504 01:41:41.375119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqt84-tpdmn" condition "Approved" to 2026-05-04 01:41:41.37510879 +0000 UTC m=+430.450327897 I0504 01:41:41.396465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqt84-tpdmn" condition "Ready" to 2026-05-04 01:41:41.39645297 +0000 UTC m=+430.471672097 I0504 01:41:41.437049 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:41.437034415 +0000 UTC m=+430.512253532 I0504 01:41:41.456995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqt84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:41.506807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqt84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqt84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:52.603294 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 01:41:52.603277507 +0000 UTC m=+441.678496614 I0504 01:41:52.603515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:52.603539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 01:41:52.603534645 +0000 UTC m=+441.678753762 I0504 01:41:52.627097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:52.627191 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 01:41:52.627157806 +0000 UTC m=+441.702376923 I0504 01:41:52.820731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:52.860784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x2chx" condition "Approved" to 2026-05-04 01:41:52.860766221 +0000 UTC m=+441.935985348 I0504 01:41:52.881004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x2chx" condition "Ready" to 2026-05-04 01:41:52.880993298 +0000 UTC m=+441.956212405 I0504 01:41:52.918141 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:52.918125428 +0000 UTC m=+441.993344555 I0504 01:41:52.941916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:52.942527 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:52.942517282 +0000 UTC m=+442.017736399 I0504 01:41:52.963634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:52.964003 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:52.963989976 +0000 UTC m=+442.039209103 I0504 01:45:10.008312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:45:10.008382 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 01:45:10.008366879 +0000 UTC m=+639.083586016 I0504 01:45:10.008724 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:45:10.008712487 +0000 UTC m=+639.083931614 I0504 01:45:10.025912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:10.025970 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:45:10.025963278 +0000 UTC m=+639.101182405 I0504 01:45:10.107149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:10.138261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8l4sj" condition "Approved" to 2026-05-04 01:45:10.138250251 +0000 UTC m=+639.213469378 I0504 01:45:10.157600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8l4sj" condition "Ready" to 2026-05-04 01:45:10.157586404 +0000 UTC m=+639.232805541 I0504 01:45:10.186859 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:45:10.186843372 +0000 UTC m=+639.262062529 I0504 01:45:10.207164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:50.305085 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-04 01:45:50.305073127 +0000 UTC m=+679.380292234 I0504 01:45:50.305384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:45:50.305400 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-04 01:45:50.305397384 +0000 UTC m=+679.380616501 I0504 01:45:50.322300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:50.322378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:45:50.322401 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-04 01:45:50.32239219 +0000 UTC m=+679.397611337 I0504 01:45:50.519714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:50.531325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fhl5d" condition "Approved" to 2026-05-04 01:45:50.531314269 +0000 UTC m=+679.606533386 I0504 01:45:50.553583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fhl5d" condition "Ready" to 2026-05-04 01:45:50.55357387 +0000 UTC m=+679.628792997 I0504 01:45:50.580014 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:45:50.580002566 +0000 UTC m=+679.655221693 I0504 01:45:50.606765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"