I0527 13:47:37.838933 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0527 13:47:37.839087 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0527 13:47:37.839199 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0527 13:47:37.844612 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0527 13:47:37.845106 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0527 13:47:37.845858 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0527 13:47:37.845882 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0527 13:47:37.847880 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0527 13:47:37.858973 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0527 13:47:37.863080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0527 13:47:37.865778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0527 13:47:37.871353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0527 13:47:37.873930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0527 13:47:37.876353 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0527 13:47:37.876397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0527 13:47:37.878874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0527 13:47:37.880780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0527 13:47:37.880904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0527 13:47:37.882661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0527 13:47:37.886549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0527 13:47:37.889069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0527 13:47:37.889124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0527 13:47:37.891766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0527 13:47:37.894159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0527 13:47:37.896130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0527 13:47:37.897845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0527 13:47:37.899508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0527 13:47:37.901308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0527 13:47:37.903258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0527 13:47:37.908145 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0527 13:47:37.908183 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0527 13:47:37.908234 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0527 13:47:37.908397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0527 13:47:37.912272 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.912592 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.913989 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.931411 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.945147 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.961663 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.977016 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.990734 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:37.991454 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:38.009182 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 13:47:56.380048 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-27 13:47:56.380017138 +0000 UTC m=+18.577293887 I0527 13:47:57.113177 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 13:47:57.113166404 +0000 UTC m=+19.310443133 I0527 13:47:57.113958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:47:57.113976 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 13:47:57.1139719 +0000 UTC m=+19.311248629 E0527 13:47:57.138140 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 13:47:57.138209 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-27 13:47:57.138202443 +0000 UTC m=+19.335479172 E0527 13:47:57.138239 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 13:47:57.140476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:47:57.140602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:47:57.140651 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 13:47:57.140643354 +0000 UTC m=+19.337920083 E0527 13:47:57.156521 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0527 13:47:57.157308 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 13:47:57.157548 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 13:47:57.157682 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0527 13:47:57.302759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:47:57.306546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlsz8" condition "Approved" to 2026-05-27 13:47:57.306534398 +0000 UTC m=+19.503811117 I0527 13:47:57.332159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlsz8" condition "Ready" to 2026-05-27 13:47:57.332146876 +0000 UTC m=+19.529423615 I0527 13:47:57.361256 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:47:57.361236929 +0000 UTC m=+19.558513678 I0527 13:47:57.376516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:47:57.422361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:48:02.158010 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:48:02.157995191 +0000 UTC m=+24.355271930 I0527 13:48:28.924301 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 13:48:28.924276571 +0000 UTC m=+51.121553300 I0527 13:48:28.924610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:48:28.924656 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 13:48:28.924650782 +0000 UTC m=+51.121927511 I0527 13:48:28.950547 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-27 13:48:28.950534602 +0000 UTC m=+51.147811331 I0527 13:48:28.976836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:48:28.976934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:48:28.977052 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 13:48:28.977044629 +0000 UTC m=+51.174321358 I0527 13:48:29.145820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5982l" condition "Approved" to 2026-05-27 13:48:29.145806492 +0000 UTC m=+51.343083221 I0527 13:48:29.187582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5982l" condition "Ready" to 2026-05-27 13:48:29.187567971 +0000 UTC m=+51.384844730 I0527 13:48:29.232569 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:48:29.23255707 +0000 UTC m=+51.429833799 I0527 13:48:29.255178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:48:29.320293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:53:27.510893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:53:27.510922 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Issuing" to 2026-05-27 13:53:27.510916856 +0000 UTC m=+349.708193575 I0527 13:53:27.511098 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready" to 2026-05-27 13:53:27.51108817 +0000 UTC m=+349.708364889 I0527 13:53:27.544542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:53:27.544647 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready" to 2026-05-27 13:53:27.544635157 +0000 UTC m=+349.741911916 I0527 13:53:27.811479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:53:27.852241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-cfs5z" condition "Approved" to 2026-05-27 13:53:27.852211717 +0000 UTC m=+350.049488476 I0527 13:53:27.874388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-cfs5z" condition "Ready" to 2026-05-27 13:53:27.874379091 +0000 UTC m=+350.071655810 I0527 13:53:27.900426 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:53:27.900417048 +0000 UTC m=+350.097693777 I0527 13:53:27.921622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:54:33.424771 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 13:54:33.424737637 +0000 UTC m=+415.622014366 I0527 13:54:33.425249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:54:33.425271 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 13:54:33.425266529 +0000 UTC m=+415.622543268 E0527 13:54:33.439450 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 13:54:33.439492 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-27 13:54:33.439484412 +0000 UTC m=+415.636761141 E0527 13:54:33.439542 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 13:54:33.444563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:54:33.444662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:54:33.444687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 13:54:33.444679623 +0000 UTC m=+415.641956352 E0527 13:54:33.456706 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0527 13:54:33.456811 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 13:54:33.456890 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 13:54:33.456920 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0527 13:54:33.479029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:54:33.481457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f72xt" condition "Approved" to 2026-05-27 13:54:33.481443178 +0000 UTC m=+415.678719907 I0527 13:54:33.493501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f72xt" condition "Ready" to 2026-05-27 13:54:33.493493506 +0000 UTC m=+415.690770225 I0527 13:54:33.516147 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:54:33.516132859 +0000 UTC m=+415.713409588 I0527 13:54:33.534499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:54:38.457637 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:54:38.457624537 +0000 UTC m=+420.654901286 I0527 13:55:22.797052 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 13:55:22.797036427 +0000 UTC m=+464.994313146 I0527 13:55:22.797897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:22.798015 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 13:55:22.798007448 +0000 UTC m=+464.995284177 I0527 13:55:22.804597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:22.804612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 13:55:22.804601998 +0000 UTC m=+465.001878727 I0527 13:55:22.804635 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 13:55:22.804631219 +0000 UTC m=+465.001907948 I0527 13:55:22.805348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:22.815956 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 13:55:22.81593771 +0000 UTC m=+465.013214469 I0527 13:55:22.807180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 13:55:22.806791395 +0000 UTC m=+465.004068204 I0527 13:55:22.847640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:22.847690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:22.847705 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 13:55:22.847700248 +0000 UTC m=+465.044976957 I0527 13:55:22.856582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:22.856631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:22.856647 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 13:55:22.856642759 +0000 UTC m=+465.053919478 I0527 13:55:22.859664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:22.859701 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 13:55:22.859697594 +0000 UTC m=+465.056974313 I0527 13:55:22.989577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.033656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xr9vd" condition "Approved" to 2026-05-27 13:55:23.033645495 +0000 UTC m=+465.230922224 I0527 13:55:23.066089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xr9vd" condition "Ready" to 2026-05-27 13:55:23.066075128 +0000 UTC m=+465.263351877 I0527 13:55:23.122793 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:23.122775837 +0000 UTC m=+465.320052596 I0527 13:55:23.123610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.159477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7gvs" condition "Approved" to 2026-05-27 13:55:23.15945924 +0000 UTC m=+465.356736009 I0527 13:55:23.173141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.196546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7gvs" condition "Ready" to 2026-05-27 13:55:23.19653766 +0000 UTC m=+465.393814379 I0527 13:55:23.241960 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:23.241946399 +0000 UTC m=+465.439223128 I0527 13:55:23.261171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.261493 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:23.261487336 +0000 UTC m=+465.458764055 I0527 13:55:23.293984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.786032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:23.787357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:24.743067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-l9t2p" condition "Approved" to 2026-05-27 13:55:24.743054467 +0000 UTC m=+466.940331186 I0527 13:55:24.745259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:25.086113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:25.445165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-l9t2p" condition "Ready" to 2026-05-27 13:55:25.445153086 +0000 UTC m=+467.642429815 I0527 13:55:26.062696 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:26.062594569 +0000 UTC m=+468.259871298 I0527 13:55:26.109487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:39.174991 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" condition "Ready" to 2026-05-27 13:55:39.174979534 +0000 UTC m=+481.372256253 I0527 13:55:39.182503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:39.182630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" condition "Issuing" to 2026-05-27 13:55:39.182556156 +0000 UTC m=+481.379832915 I0527 13:55:39.196159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fh77l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:39.196271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:39.196318 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" condition "Issuing" to 2026-05-27 13:55:39.196288079 +0000 UTC m=+481.393564808 I0527 13:55:39.483081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fh77l-2hsr9" condition "Approved" to 2026-05-27 13:55:39.483069127 +0000 UTC m=+481.680345846 I0527 13:55:39.959139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fh77l-2hsr9" condition "Ready" to 2026-05-27 13:55:39.959125512 +0000 UTC m=+482.156402241 I0527 13:55:40.096171 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:40.096159116 +0000 UTC m=+482.293435845 I0527 13:55:40.704355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fh77l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:40.704831 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:40.704821971 +0000 UTC m=+482.902098730 I0527 13:55:41.206968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fh77l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fh77l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:56.512059 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 13:55:56.512039306 +0000 UTC m=+498.709316035 I0527 13:55:56.512558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:56.512580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 13:55:56.512575337 +0000 UTC m=+498.709852066 I0527 13:55:56.532336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:56.532451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:55:56.532491 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 13:55:56.532485732 +0000 UTC m=+498.729762451 I0527 13:55:56.900698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:56.911787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d889c" condition "Approved" to 2026-05-27 13:55:56.911760662 +0000 UTC m=+499.109037421 I0527 13:55:56.955238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d889c" condition "Ready" to 2026-05-27 13:55:56.955222349 +0000 UTC m=+499.152499078 I0527 13:55:56.991348 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:56.99133257 +0000 UTC m=+499.188609299 I0527 13:55:57.015528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:57.016087 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:57.016076308 +0000 UTC m=+499.213353037 I0527 13:55:57.035978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:57.036755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:57.049582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:55:57.050783 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:55:57.050771158 +0000 UTC m=+499.248047897 I0527 13:59:24.766522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:59:24.766554 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 13:59:24.766545835 +0000 UTC m=+706.963822574 I0527 13:59:24.767427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 13:59:24.767415098 +0000 UTC m=+706.964691847 I0527 13:59:24.806190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:59:24.806274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 13:59:24.806291 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 13:59:24.806285496 +0000 UTC m=+707.003562225 I0527 13:59:25.281945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sf4kf" condition "Approved" to 2026-05-27 13:59:25.281934321 +0000 UTC m=+707.479211050 I0527 13:59:25.304661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sf4kf" condition "Ready" to 2026-05-27 13:59:25.304645984 +0000 UTC m=+707.501922733 I0527 13:59:25.336213 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:59:25.336202187 +0000 UTC m=+707.533478916 I0527 13:59:25.356997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 13:59:25.357361 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 13:59:25.357354882 +0000 UTC m=+707.554631601 I0527 13:59:25.386250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 14:02:23.074243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 14:02:23.074278 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 14:02:23.074269936 +0000 UTC m=+885.271546665 I0527 14:02:23.074814 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 14:02:23.074803482 +0000 UTC m=+885.272080241 I0527 14:02:23.315316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 14:02:23.315394 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 14:02:23.31538628 +0000 UTC m=+885.512663009 I0527 14:02:23.540279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 14:02:23.581025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8h29q" condition "Approved" to 2026-05-27 14:02:23.58101413 +0000 UTC m=+885.778290869 I0527 14:02:23.649790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8h29q" condition "Ready" to 2026-05-27 14:02:23.649780415 +0000 UTC m=+885.847057144 I0527 14:02:23.712479 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 14:02:23.71246964 +0000 UTC m=+885.909746359 I0527 14:02:23.760721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 14:02:23.761129 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 14:02:23.761123248 +0000 UTC m=+885.958399987 I0527 14:02:23.781962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 14:02:23.782141 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 14:02:23.782136074 +0000 UTC m=+885.979412793 E0527 14:02:57.603121 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out