I0529 02:02:42.254308 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0529 02:02:42.254419 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0529 02:02:42.254487 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0529 02:02:42.257683 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0529 02:02:42.258007 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0529 02:02:42.258145 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0529 02:02:42.258148 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0529 02:02:42.260535 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0529 02:02:42.273384 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0529 02:02:42.273641 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0529 02:02:42.273695 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0529 02:02:42.273712 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0529 02:02:42.279878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0529 02:02:42.284598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0529 02:02:42.287174 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0529 02:02:42.289831 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0529 02:02:42.289907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0529 02:02:42.292325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0529 02:02:42.294672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0529 02:02:42.296349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0529 02:02:42.304883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0529 02:02:42.307229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0529 02:02:42.309779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0529 02:02:42.312375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0529 02:02:42.314728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0529 02:02:42.316576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0529 02:02:42.318349 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0529 02:02:42.318374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0529 02:02:42.318419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0529 02:02:42.320239 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0529 02:02:42.325580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0529 02:02:42.327240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0529 02:02:42.328984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0529 02:02:42.332109 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.332589 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.333421 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.358570 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.368052 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.388531 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.403746 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.414096 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.427443 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:42.430085 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 02:02:55.867080 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-29 02:02:55.867029422 +0000 UTC m=+13.644393829 I0529 02:02:56.537651 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 02:02:56.537637885 +0000 UTC m=+14.315002292 I0529 02:02:56.537713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:02:56.538049 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-29 02:02:56.538028207 +0000 UTC m=+14.315392594 E0529 02:02:56.556466 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 02:02:56.556555 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-29 02:02:56.556549204 +0000 UTC m=+14.333913581 E0529 02:02:56.556589 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 02:02:56.571280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:02:56.571368 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 02:02:56.571361279 +0000 UTC m=+14.348725666 E0529 02:02:56.574018 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0529 02:02:56.574149 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 02:02:56.574199 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 02:02:56.574244 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0529 02:02:56.579753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:02:56.579817 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 02:02:56.579810751 +0000 UTC m=+14.357175138 I0529 02:02:56.581240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rpjzj" condition "Approved" to 2026-05-29 02:02:56.581232185 +0000 UTC m=+14.358596572 I0529 02:02:56.592890 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 02:02:56.592874138 +0000 UTC m=+14.370238545 I0529 02:02:56.594069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rpjzj" condition "Ready" to 2026-05-29 02:02:56.594062743 +0000 UTC m=+14.371427130 I0529 02:02:56.600727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:02:56.612876 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:02:56.612867901 +0000 UTC m=+14.390232308 I0529 02:02:56.628289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:02:56.628507 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:02:56.628500739 +0000 UTC m=+14.405865116 I0529 02:02:56.646325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:02:56.646558 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:02:56.646550085 +0000 UTC m=+14.423914452 I0529 02:02:56.648175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:03:01.575431 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:03:01.575412337 +0000 UTC m=+19.352776754 I0529 02:03:24.311728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:03:24.311902 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 02:03:24.311887624 +0000 UTC m=+42.089252001 I0529 02:03:24.311762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 02:03:24.311754903 +0000 UTC m=+42.089119300 I0529 02:03:24.323447 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-29 02:03:24.323438007 +0000 UTC m=+42.100802374 I0529 02:03:24.336024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:03:24.337412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:03:24.337480 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 02:03:24.337473114 +0000 UTC m=+42.114837491 I0529 02:03:24.593740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lddkb" condition "Approved" to 2026-05-29 02:03:24.593723764 +0000 UTC m=+42.371088181 I0529 02:03:24.627490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lddkb" condition "Ready" to 2026-05-29 02:03:24.627479348 +0000 UTC m=+42.404843735 I0529 02:03:24.661480 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:03:24.661470573 +0000 UTC m=+42.438834960 I0529 02:03:24.691650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:07:37.285563 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-05-29 02:07:37.285529002 +0000 UTC m=+295.062893389 I0529 02:07:37.286109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-49.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:07:37.286131 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Issuing" to 2026-05-29 02:07:37.286127408 +0000 UTC m=+295.063491795 I0529 02:07:37.312198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:07:37.312745 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-05-29 02:07:37.312720782 +0000 UTC m=+295.090085199 I0529 02:07:37.439086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:07:37.465980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-sgghz" condition "Approved" to 2026-05-29 02:07:37.465965194 +0000 UTC m=+295.243329571 I0529 02:07:37.492586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-sgghz" condition "Ready" to 2026-05-29 02:07:37.492572828 +0000 UTC m=+295.269937215 I0529 02:07:37.519897 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:07:37.51987946 +0000 UTC m=+295.297243877 I0529 02:07:37.536908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:07:37.537884 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:07:37.537841055 +0000 UTC m=+295.315205452 I0529 02:07:37.554444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:08:41.336296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:08:41.336965 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-29 02:08:41.336946416 +0000 UTC m=+359.114310833 I0529 02:08:41.337190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 02:08:41.33717596 +0000 UTC m=+359.114540367 E0529 02:08:41.351722 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 02:08:41.351779 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-29 02:08:41.351768541 +0000 UTC m=+359.129132958 E0529 02:08:41.351865 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 02:08:41.354956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:08:41.355031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:08:41.355061 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 02:08:41.355051806 +0000 UTC m=+359.132416233 E0529 02:08:41.361946 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0529 02:08:41.362047 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 02:08:41.362091 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 02:08:41.362144 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0529 02:08:41.382829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:08:41.390395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrkcr" condition "Approved" to 2026-05-29 02:08:41.390378851 +0000 UTC m=+359.167743268 I0529 02:08:41.401477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrkcr" condition "Ready" to 2026-05-29 02:08:41.401467371 +0000 UTC m=+359.178831758 I0529 02:08:41.417895 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:08:41.417887369 +0000 UTC m=+359.195251756 I0529 02:08:41.434589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:08:41.435055 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:08:41.43504465 +0000 UTC m=+359.212409067 I0529 02:08:41.465346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:08:46.363327 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:08:46.363296856 +0000 UTC m=+364.140661263 I0529 02:09:24.632481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:24.632521 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-29 02:09:24.632515095 +0000 UTC m=+402.409879462 I0529 02:09:24.632781 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-29 02:09:24.632777209 +0000 UTC m=+402.410141576 I0529 02:09:24.641753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-29 02:09:24.641746396 +0000 UTC m=+402.419110763 I0529 02:09:24.641979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:24.641996 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-29 02:09:24.641993631 +0000 UTC m=+402.419357998 I0529 02:09:24.642110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:24.642123 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-29 02:09:24.642120793 +0000 UTC m=+402.419485170 I0529 02:09:24.642226 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-29 02:09:24.642223875 +0000 UTC m=+402.419588242 I0529 02:09:24.658924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:24.658981 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-29 02:09:24.658975859 +0000 UTC m=+402.436340236 I0529 02:09:24.676499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:24.685362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:24.689497 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-29 02:09:24.689446784 +0000 UTC m=+402.466811161 I0529 02:09:24.689520 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:24.689548 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-29 02:09:24.689542555 +0000 UTC m=+402.466906932 I0529 02:09:24.875231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:24.878247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:24.903253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w24wg" condition "Approved" to 2026-05-29 02:09:24.903244036 +0000 UTC m=+402.680608403 I0529 02:09:24.926610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zxlt5" condition "Approved" to 2026-05-29 02:09:24.926600116 +0000 UTC m=+402.703964503 I0529 02:09:24.931775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w24wg" condition "Ready" to 2026-05-29 02:09:24.931769627 +0000 UTC m=+402.709134004 I0529 02:09:24.942831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zxlt5" condition "Ready" to 2026-05-29 02:09:24.942823701 +0000 UTC m=+402.720188088 I0529 02:09:24.971017 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:24.971007445 +0000 UTC m=+402.748371822 I0529 02:09:24.986555 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:24.986544568 +0000 UTC m=+402.763908945 I0529 02:09:25.011850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:25.068341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dkr7d" condition "Approved" to 2026-05-29 02:09:25.068328479 +0000 UTC m=+402.845692846 I0529 02:09:25.079703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:25.080415 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:25.080407011 +0000 UTC m=+402.857771408 I0529 02:09:25.293407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dkr7d" condition "Ready" to 2026-05-29 02:09:25.292097196 +0000 UTC m=+403.069461583 I0529 02:09:25.673100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:26.019309 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:26.019295824 +0000 UTC m=+403.796660211 I0529 02:09:26.171835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:26.172148 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:26.172140142 +0000 UTC m=+403.949504529 I0529 02:09:26.223351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:26.473324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:26.522131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:33.396453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:33.396451 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" condition "Ready" to 2026-05-29 02:09:33.3964364 +0000 UTC m=+411.173800777 I0529 02:09:33.396487 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" condition "Issuing" to 2026-05-29 02:09:33.396477101 +0000 UTC m=+411.173841478 I0529 02:09:33.410849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:33.410896 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" condition "Ready" to 2026-05-29 02:09:33.410891669 +0000 UTC m=+411.188256046 I0529 02:09:33.577244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:33.867154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zjqcq-kdxw5" condition "Approved" to 2026-05-29 02:09:33.86713543 +0000 UTC m=+411.644499837 I0529 02:09:33.892462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zjqcq-kdxw5" condition "Ready" to 2026-05-29 02:09:33.892452794 +0000 UTC m=+411.669817171 I0529 02:09:33.964527 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:33.96451309 +0000 UTC m=+411.741877467 I0529 02:09:33.986026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:33.986356 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:33.986346465 +0000 UTC m=+411.763710842 I0529 02:09:34.021109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjqcq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:44.808200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:09:44.808303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-29 02:09:44.80829464 +0000 UTC m=+422.585659007 I0529 02:09:44.808263 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-29 02:09:44.808250109 +0000 UTC m=+422.585614486 I0529 02:09:44.834411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:44.834560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-29 02:09:44.834551228 +0000 UTC m=+422.611915615 I0529 02:09:45.048659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:09:45.080573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9z5fp" condition "Approved" to 2026-05-29 02:09:45.08055771 +0000 UTC m=+422.857922097 I0529 02:09:45.100470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9z5fp" condition "Ready" to 2026-05-29 02:09:45.100455131 +0000 UTC m=+422.877819518 I0529 02:09:45.135760 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:09:45.13574656 +0000 UTC m=+422.913110947 I0529 02:09:45.164029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:12.755246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:13:12.755279 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-29 02:13:12.755272678 +0000 UTC m=+630.532637065 I0529 02:13:12.755444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-29 02:13:12.7554392 +0000 UTC m=+630.532803567 I0529 02:13:12.771867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:12.771932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:13:12.771948 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-29 02:13:12.771943628 +0000 UTC m=+630.549308005 I0529 02:13:13.140251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:13.149334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pn25j" condition "Approved" to 2026-05-29 02:13:13.149321509 +0000 UTC m=+630.926685896 I0529 02:13:13.164720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pn25j" condition "Ready" to 2026-05-29 02:13:13.164709012 +0000 UTC m=+630.942073409 I0529 02:13:13.197136 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:13:13.197126472 +0000 UTC m=+630.974490859 I0529 02:13:13.217988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:13.218389 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:13:13.218382439 +0000 UTC m=+630.995746826 I0529 02:13:13.230474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:13.230791 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:13:13.230784386 +0000 UTC m=+631.008148783 I0529 02:13:13.232565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:52.104867 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 02:13:52.104852588 +0000 UTC m=+669.882216955 I0529 02:13:52.105279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:13:52.105342 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 02:13:52.105338763 +0000 UTC m=+669.882703140 I0529 02:13:52.129949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 02:13:52.130049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 02:13:52.130072 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 02:13:52.130067319 +0000 UTC m=+669.907431686 I0529 02:13:52.364206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xb7k4" condition "Approved" to 2026-05-29 02:13:52.36419343 +0000 UTC m=+670.141557847 I0529 02:13:52.384968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xb7k4" condition "Ready" to 2026-05-29 02:13:52.384958077 +0000 UTC m=+670.162322464 I0529 02:13:52.408826 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 02:13:52.408813741 +0000 UTC m=+670.186178128 I0529 02:13:52.439659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"