I0520 17:23:47.137292 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 17:23:47.137456 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 17:23:47.137539 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 17:23:47.142782 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 17:23:47.143114 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 17:23:47.143144 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 17:23:47.143178 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 17:23:47.145576 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 17:23:47.183630 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 17:23:47.188064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 17:23:47.190619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 17:23:47.195747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 17:23:47.198349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 17:23:47.200738 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 17:23:47.200812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 17:23:47.200815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 17:23:47.203446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 17:23:47.205574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 17:23:47.207355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 17:23:47.210114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 17:23:47.218346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 17:23:47.220901 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 17:23:47.220928 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 17:23:47.220994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 17:23:47.223584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 17:23:47.225914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 17:23:47.233067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 17:23:47.235802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 17:23:47.238837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 17:23:47.241253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 17:23:47.245243 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 17:23:47.245273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 17:23:47.245806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 17:23:47.247622 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.249217 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.249653 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.273870 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.307932 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.308502 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.329103 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.334657 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.344579 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:23:47.359455 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:24:10.581858 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 17:24:10.581835613 +0000 UTC m=+23.472103374 I0520 17:24:11.540256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:24:11.540309 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 17:24:11.540296576 +0000 UTC m=+24.430564336 I0520 17:24:11.540513 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 17:24:11.540487151 +0000 UTC m=+24.430755191 E0520 17:24:11.556731 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:24:11.556811 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 17:24:11.55680341 +0000 UTC m=+24.447071150 E0520 17:24:11.556850 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:24:11.562588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:24:11.562676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:24:11.562809 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 17:24:11.562686588 +0000 UTC m=+24.452954318 E0520 17:24:11.571053 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 17:24:11.571368 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:24:11.571416 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:24:11.571459 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 17:24:11.611405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jwvgv" condition "Approved" to 2026-05-20 17:24:11.611394079 +0000 UTC m=+24.501661809 I0520 17:24:11.625256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jwvgv" condition "Ready" to 2026-05-20 17:24:11.625241612 +0000 UTC m=+24.515509332 I0520 17:24:11.685396 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:24:11.68538143 +0000 UTC m=+24.575649160 I0520 17:24:11.707137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:24:16.571837 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:24:16.571822616 +0000 UTC m=+29.462090336 I0520 17:24:52.366762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:24:52.366864 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 17:24:52.366854577 +0000 UTC m=+65.257122307 I0520 17:24:52.366762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 17:24:52.366734253 +0000 UTC m=+65.257001983 I0520 17:24:52.385938 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 17:24:52.385923539 +0000 UTC m=+65.276191269 I0520 17:24:52.417233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:24:52.417303 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 17:24:52.417296492 +0000 UTC m=+65.307564212 I0520 17:24:52.815569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:24:52.848648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6pmq" condition "Approved" to 2026-05-20 17:24:52.848634838 +0000 UTC m=+65.738902598 I0520 17:24:52.879678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6pmq" condition "Ready" to 2026-05-20 17:24:52.879668921 +0000 UTC m=+65.769936651 I0520 17:24:52.911328 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:24:52.911315933 +0000 UTC m=+65.801583653 I0520 17:24:52.940076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:29:17.725179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-05-20 17:29:17.725129592 +0000 UTC m=+330.615397342 I0520 17:29:17.725231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:29:17.725363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-05-20 17:29:17.72535209 +0000 UTC m=+330.615619840 I0520 17:29:17.742958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:29:17.743039 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-05-20 17:29:17.74302955 +0000 UTC m=+330.633297300 I0520 17:29:17.961141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:29:17.991276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-6dlfr" condition "Approved" to 2026-05-20 17:29:17.991266433 +0000 UTC m=+330.881534163 I0520 17:29:18.013884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-6dlfr" condition "Ready" to 2026-05-20 17:29:18.013874663 +0000 UTC m=+330.904142393 I0520 17:29:18.044480 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:29:18.044468538 +0000 UTC m=+330.934736278 I0520 17:29:18.060416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.532465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:30:24.532556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 17:30:24.532548476 +0000 UTC m=+397.422816196 I0520 17:30:24.532467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 17:30:24.532420361 +0000 UTC m=+397.422688111 E0520 17:30:24.545273 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:30:24.545369 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 17:30:24.545362913 +0000 UTC m=+397.435630623 E0520 17:30:24.545438 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:30:24.547025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.547119 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 17:30:24.547112967 +0000 UTC m=+397.437380707 E0520 17:30:24.560107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 17:30:24.560603 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:30:24.560747 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:30:24.560878 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 17:30:24.565680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.588902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nr4xm" condition "Approved" to 2026-05-20 17:30:24.588888498 +0000 UTC m=+397.479156238 I0520 17:30:24.603246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nr4xm" condition "Ready" to 2026-05-20 17:30:24.603233241 +0000 UTC m=+397.493500991 I0520 17:30:24.625646 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:30:24.625635396 +0000 UTC m=+397.515903126 I0520 17:30:24.648559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.648846 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:30:24.648838062 +0000 UTC m=+397.539105782 I0520 17:30:24.650891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.662933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:30:24.663113 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:30:24.663106161 +0000 UTC m=+397.553373891 I0520 17:30:29.561598 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:30:29.561583661 +0000 UTC m=+402.451851421 I0520 17:31:14.184158 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 17:31:14.184145648 +0000 UTC m=+447.074413368 I0520 17:31:14.184538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.184590 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 17:31:14.184584264 +0000 UTC m=+447.074851984 I0520 17:31:14.248492 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 17:31:14.248480431 +0000 UTC m=+447.138748141 I0520 17:31:14.248539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.248570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.248582 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 17:31:14.248577625 +0000 UTC m=+447.138845345 I0520 17:31:14.248817 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 17:31:14.248813083 +0000 UTC m=+447.139080793 I0520 17:31:14.248840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.248893 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 17:31:14.248890236 +0000 UTC m=+447.139157956 I0520 17:31:14.249068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.249084 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 17:31:14.249081563 +0000 UTC m=+447.139349283 I0520 17:31:14.298695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.302618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.302778 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 17:31:14.302770071 +0000 UTC m=+447.193037791 I0520 17:31:14.302979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.303204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:14.303454 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 17:31:14.303447115 +0000 UTC m=+447.193714845 I0520 17:31:14.546652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.547882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6x4z5" condition "Approved" to 2026-05-20 17:31:14.5478728 +0000 UTC m=+447.438140520 I0520 17:31:14.569993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6x4z5" condition "Ready" to 2026-05-20 17:31:14.569980292 +0000 UTC m=+447.460248042 I0520 17:31:14.630575 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:14.630561939 +0000 UTC m=+447.520829659 I0520 17:31:14.636230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.640139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pv5hh" condition "Approved" to 2026-05-20 17:31:14.640124286 +0000 UTC m=+447.530392046 I0520 17:31:14.652944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b62t2" condition "Approved" to 2026-05-20 17:31:14.652931681 +0000 UTC m=+447.543199411 I0520 17:31:14.659502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:14.801063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b62t2" condition "Ready" to 2026-05-20 17:31:14.801053213 +0000 UTC m=+447.691320933 I0520 17:31:14.801070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pv5hh" condition "Ready" to 2026-05-20 17:31:14.801052183 +0000 UTC m=+447.691319933 I0520 17:31:15.110530 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:15.110515767 +0000 UTC m=+448.000783507 I0520 17:31:15.884337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:15.885393 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:15.885384379 +0000 UTC m=+448.775652099 I0520 17:31:16.220380 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:16.220369767 +0000 UTC m=+449.110637487 I0520 17:31:16.221795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:16.274457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:16.275704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:16.289634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.002077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:35.002118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Issuing" to 2026-05-20 17:31:35.002109684 +0000 UTC m=+467.892377424 I0520 17:31:35.002217 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Ready" to 2026-05-20 17:31:35.002199237 +0000 UTC m=+467.892466987 I0520 17:31:35.017315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.017429 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Ready" to 2026-05-20 17:31:35.017420348 +0000 UTC m=+467.907688078 I0520 17:31:35.145776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.175857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n9fmh-wqw8p" condition "Approved" to 2026-05-20 17:31:35.175844326 +0000 UTC m=+468.066112046 I0520 17:31:35.192599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n9fmh-wqw8p" condition "Ready" to 2026-05-20 17:31:35.192589392 +0000 UTC m=+468.082857122 I0520 17:31:35.218354 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:35.218341285 +0000 UTC m=+468.108609015 I0520 17:31:35.242419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.245120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:35.245111624 +0000 UTC m=+468.135379344 I0520 17:31:35.255687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.272405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:35.272724 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:35.272717134 +0000 UTC m=+468.162984854 I0520 17:31:35.274378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n9fmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:00.691801 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 17:32:00.691760795 +0000 UTC m=+493.582028555 I0520 17:32:00.692208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:32:00.692261 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 17:32:00.692253633 +0000 UTC m=+493.582521353 I0520 17:32:00.707135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:00.707343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:32:00.707371 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 17:32:00.70736409 +0000 UTC m=+493.597631810 I0520 17:32:00.854435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:00.875716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ts52v" condition "Approved" to 2026-05-20 17:32:00.875700688 +0000 UTC m=+493.765968428 I0520 17:32:00.895539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ts52v" condition "Ready" to 2026-05-20 17:32:00.895528516 +0000 UTC m=+493.785796246 I0520 17:32:00.924905 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:32:00.924891498 +0000 UTC m=+493.815159228 I0520 17:32:00.948647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:00.949034 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:32:00.949026731 +0000 UTC m=+493.839294461 I0520 17:32:00.965577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:35:29.041528 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 17:35:29.041473731 +0000 UTC m=+701.931741461 I0520 17:35:29.041611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:35:29.041660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 17:35:29.041650976 +0000 UTC m=+701.931918726 I0520 17:35:29.077708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:35:29.077844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 17:35:29.07779779 +0000 UTC m=+701.968065510 I0520 17:35:29.181330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:35:29.240443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s2p7z" condition "Approved" to 2026-05-20 17:35:29.240430459 +0000 UTC m=+702.130698189 I0520 17:35:29.263055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s2p7z" condition "Ready" to 2026-05-20 17:35:29.263022612 +0000 UTC m=+702.153290332 I0520 17:35:29.294106 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:35:29.294090932 +0000 UTC m=+702.184358662 I0520 17:35:29.360930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:35:29.361756 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:35:29.361750488 +0000 UTC m=+702.252018198 I0520 17:35:29.370571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:35:29.394073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:36:10.260114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:36:10.260192 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 17:36:10.260184751 +0000 UTC m=+743.150452481 I0520 17:36:10.260200 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 17:36:10.260182071 +0000 UTC m=+743.150449811 I0520 17:36:10.276149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:36:10.276226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:36:10.276243 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 17:36:10.276237798 +0000 UTC m=+743.166505508 I0520 17:36:10.504516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mrcq7" condition "Approved" to 2026-05-20 17:36:10.504508332 +0000 UTC m=+743.394776042 I0520 17:36:10.525101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mrcq7" condition "Ready" to 2026-05-20 17:36:10.52509071 +0000 UTC m=+743.415358440 I0520 17:36:10.556808 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:36:10.556795472 +0000 UTC m=+743.447063202 I0520 17:36:10.584680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:36:10.635450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"