I0514 14:23:16.342472 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0514 14:23:16.342811 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0514 14:23:16.343046 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0514 14:23:16.347664 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0514 14:23:16.348170 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0514 14:23:16.348242 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0514 14:23:16.348353 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0514 14:23:16.351745 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0514 14:23:16.364628 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0514 14:23:16.370309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0514 14:23:16.374384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0514 14:23:16.377232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0514 14:23:16.377258 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0514 14:23:16.377270 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0514 14:23:16.377273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0514 14:23:16.380226 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0514 14:23:16.380249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0514 14:23:16.382394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0514 14:23:16.384386 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0514 14:23:16.386982 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0514 14:23:16.387191 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0514 14:23:16.395805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0514 14:23:16.398292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0514 14:23:16.400664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0514 14:23:16.402839 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0514 14:23:16.403012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0514 14:23:16.405315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0514 14:23:16.407468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0514 14:23:16.409240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0514 14:23:16.410832 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0514 14:23:16.415921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0514 14:23:16.418839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0514 14:23:16.421660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0514 14:23:16.427477 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.427604 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.427599 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.427848 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.442911 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.464398 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.480766 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.505316 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.506584 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:16.519867 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:23:28.405522 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-14 14:23:28.405497529 +0000 UTC m=+12.094560406 I0514 14:23:29.107692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:23:29.107866 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 14:23:29.107848547 +0000 UTC m=+12.796911414 I0514 14:23:29.107776 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 14:23:29.107765594 +0000 UTC m=+12.796828441 E0514 14:23:29.124106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:23:29.124171 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-14 14:23:29.124164323 +0000 UTC m=+12.813227160 E0514 14:23:29.124190 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:23:29.129516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:23:29.130172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:23:29.130207 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 14:23:29.130197961 +0000 UTC m=+12.819260818 E0514 14:23:29.137763 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0514 14:23:29.137857 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:23:29.137918 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:23:29.137953 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0514 14:23:29.174025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8rbld" condition "Approved" to 2026-05-14 14:23:29.174011942 +0000 UTC m=+12.863074809 I0514 14:23:29.185919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8rbld" condition "Ready" to 2026-05-14 14:23:29.185908142 +0000 UTC m=+12.874970989 I0514 14:23:29.210105 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:23:29.210093893 +0000 UTC m=+12.899156740 I0514 14:23:29.226768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:23:29.264914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:23:34.138386 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:23:34.138369158 +0000 UTC m=+17.827432025 I0514 14:23:56.417527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:23:56.417606 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 14:23:56.417596229 +0000 UTC m=+40.106659096 I0514 14:23:56.417677 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 14:23:56.417656851 +0000 UTC m=+40.106719718 I0514 14:23:56.424746 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-14 14:23:56.4247381 +0000 UTC m=+40.113800947 I0514 14:23:56.455598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:23:56.455656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:23:56.455671 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 14:23:56.455666349 +0000 UTC m=+40.144729186 I0514 14:23:56.629846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4df4b" condition "Approved" to 2026-05-14 14:23:56.629832673 +0000 UTC m=+40.318895540 I0514 14:23:56.661682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4df4b" condition "Ready" to 2026-05-14 14:23:56.661664904 +0000 UTC m=+40.350727751 I0514 14:23:56.688067 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:23:56.688052095 +0000 UTC m=+40.377114942 I0514 14:23:56.712137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:28:58.556323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:28:58.556478 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-05-14 14:28:58.55646065 +0000 UTC m=+342.245523587 I0514 14:28:58.556572 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-05-14 14:28:58.556551712 +0000 UTC m=+342.245614629 I0514 14:28:58.729435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:28:58.729521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-05-14 14:28:58.729512991 +0000 UTC m=+342.418575848 I0514 14:28:59.379677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:28:59.455166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-mcwg9" condition "Approved" to 2026-05-14 14:28:59.455146547 +0000 UTC m=+343.144209424 I0514 14:28:59.480532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-mcwg9" condition "Ready" to 2026-05-14 14:28:59.480473762 +0000 UTC m=+343.169536609 I0514 14:28:59.510766 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:28:59.510755615 +0000 UTC m=+343.199818462 I0514 14:28:59.532724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:04.289997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:04.290082 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 14:30:04.290073297 +0000 UTC m=+407.979136144 I0514 14:30:04.290609 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 14:30:04.290577916 +0000 UTC m=+407.979640773 E0514 14:30:04.306178 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:30:04.306245 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-14 14:30:04.306238181 +0000 UTC m=+407.995301018 E0514 14:30:04.306266 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:30:04.306857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:04.306949 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 14:30:04.306918443 +0000 UTC m=+407.995981290 E0514 14:30:04.318844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0514 14:30:04.319751 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:30:04.319788 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:30:04.319847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0514 14:30:04.323538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:04.343365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xhv84" condition "Approved" to 2026-05-14 14:30:04.343349904 +0000 UTC m=+408.032412751 I0514 14:30:04.361845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xhv84" condition "Ready" to 2026-05-14 14:30:04.361832 +0000 UTC m=+408.050894847 I0514 14:30:04.384037 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:04.384022373 +0000 UTC m=+408.073085260 I0514 14:30:04.403079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:04.403445 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:04.403438255 +0000 UTC m=+408.092501102 I0514 14:30:04.425603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:09.319968 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:09.319953467 +0000 UTC m=+413.009016344 I0514 14:30:51.388354 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 14:30:51.388310595 +0000 UTC m=+455.077373422 I0514 14:30:51.388657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.388674 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 14:30:51.388671411 +0000 UTC m=+455.077734238 I0514 14:30:51.388664 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-14 14:30:51.388654761 +0000 UTC m=+455.077717598 I0514 14:30:51.388793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.388813 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 14:30:51.388810813 +0000 UTC m=+455.077873650 I0514 14:30:51.388982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.388998 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 14:30:51.388995246 +0000 UTC m=+455.078058083 I0514 14:30:51.389016 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 14:30:51.389013387 +0000 UTC m=+455.078076224 I0514 14:30:51.487783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.487999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.488058 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 14:30:51.488052269 +0000 UTC m=+455.177115106 I0514 14:30:51.489604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.489647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.489661 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 14:30:51.489657055 +0000 UTC m=+455.178719892 I0514 14:30:51.492145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.492350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:51.492463 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 14:30:51.492454702 +0000 UTC m=+455.181517589 I0514 14:30:51.615966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.624564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r9xw5" condition "Approved" to 2026-05-14 14:30:51.624555782 +0000 UTC m=+455.313618629 I0514 14:30:51.642544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r9xw5" condition "Ready" to 2026-05-14 14:30:51.64253432 +0000 UTC m=+455.331597177 I0514 14:30:51.676879 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:51.67686497 +0000 UTC m=+455.365927827 I0514 14:30:51.709332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.709527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7jk7x" condition "Approved" to 2026-05-14 14:30:51.709514401 +0000 UTC m=+455.398577238 I0514 14:30:51.712653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.712852 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:51.712847386 +0000 UTC m=+455.401910223 I0514 14:30:51.741416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7jk7x" condition "Ready" to 2026-05-14 14:30:51.7414066 +0000 UTC m=+455.430469437 I0514 14:30:51.745318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.855784 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:51.855769276 +0000 UTC m=+455.544832103 I0514 14:30:51.900991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:51.977745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hg72m" condition "Approved" to 2026-05-14 14:30:51.977733608 +0000 UTC m=+455.666796475 I0514 14:30:52.055902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:52.162737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hg72m" condition "Ready" to 2026-05-14 14:30:52.162727041 +0000 UTC m=+455.851789878 I0514 14:30:52.705731 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:52.705716239 +0000 UTC m=+456.394779086 I0514 14:30:52.902385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:52.902860 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:52.902852122 +0000 UTC m=+456.591914969 I0514 14:30:53.154606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:53.200123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:04.884650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:31:04.884655 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" condition "Ready" to 2026-05-14 14:31:04.884633939 +0000 UTC m=+468.573696806 I0514 14:31:04.884762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" condition "Issuing" to 2026-05-14 14:31:04.88474627 +0000 UTC m=+468.573809167 I0514 14:31:05.248756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:05.248887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:31:05.248992 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" condition "Issuing" to 2026-05-14 14:31:05.248931968 +0000 UTC m=+468.937994805 I0514 14:31:07.277757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4v5dk-c9lw6" condition "Approved" to 2026-05-14 14:31:07.277739084 +0000 UTC m=+470.966801991 I0514 14:31:07.302667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4v5dk-c9lw6" condition "Ready" to 2026-05-14 14:31:07.302658567 +0000 UTC m=+470.991721404 I0514 14:31:07.345938 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:07.345927546 +0000 UTC m=+471.034990383 I0514 14:31:07.367685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4v5dk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:25.411227 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 14:31:25.411209194 +0000 UTC m=+489.100272041 I0514 14:31:25.411416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:31:25.411439 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 14:31:25.411434507 +0000 UTC m=+489.100497354 I0514 14:31:25.426901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:25.426990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:31:25.427010 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 14:31:25.427003672 +0000 UTC m=+489.116066529 I0514 14:31:25.738595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dsxgs" condition "Approved" to 2026-05-14 14:31:25.738585291 +0000 UTC m=+489.427648138 I0514 14:31:25.767380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dsxgs" condition "Ready" to 2026-05-14 14:31:25.767369435 +0000 UTC m=+489.456432282 I0514 14:31:25.801070 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:25.801054074 +0000 UTC m=+489.490116941 I0514 14:31:25.822335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:25.822620 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:25.822614174 +0000 UTC m=+489.511677011 I0514 14:31:25.843758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:25.843866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:25.844113 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:25.844107153 +0000 UTC m=+489.533170000 I0514 14:34:46.159176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:34:46.159209 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 14:34:46.159200875 +0000 UTC m=+689.848263722 I0514 14:34:46.159443 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 14:34:46.159428708 +0000 UTC m=+689.848491545 I0514 14:34:46.179759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:34:46.179845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 14:34:46.179834556 +0000 UTC m=+689.868897433 I0514 14:34:46.269877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:34:46.308658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z57nj" condition "Approved" to 2026-05-14 14:34:46.308641748 +0000 UTC m=+689.997704595 I0514 14:34:46.326435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z57nj" condition "Ready" to 2026-05-14 14:34:46.326406529 +0000 UTC m=+690.015469396 I0514 14:34:46.356897 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:34:46.356883204 +0000 UTC m=+690.045946041 I0514 14:34:46.393522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:35:41.787317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:35:41.787398 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-14 14:35:41.787389481 +0000 UTC m=+745.476452348 I0514 14:35:41.787998 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 14:35:41.787992873 +0000 UTC m=+745.477055710 I0514 14:35:41.801968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:35:41.802011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:35:41.802022 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-14 14:35:41.802017835 +0000 UTC m=+745.491080662 I0514 14:35:42.094281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:35:42.106216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qv77f" condition "Approved" to 2026-05-14 14:35:42.106206343 +0000 UTC m=+745.795269200 I0514 14:35:42.136480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qv77f" condition "Ready" to 2026-05-14 14:35:42.136470095 +0000 UTC m=+745.825532952 I0514 14:35:42.161879 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:35:42.161866849 +0000 UTC m=+745.850929686 I0514 14:35:42.188789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:35:42.189534 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:35:42.189528006 +0000 UTC m=+745.878590843 I0514 14:35:42.208716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"