I0529 13:58:54.499955 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0529 13:58:54.500135 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0529 13:58:54.500312 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0529 13:58:54.507266 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0529 13:58:54.507584 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0529 13:58:54.508226 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0529 13:58:54.508229 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0529 13:58:54.512574 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0529 13:58:54.531932 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0529 13:58:54.537427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0529 13:58:54.541147 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0529 13:58:54.541177 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0529 13:58:54.541209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0529 13:58:54.544815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0529 13:58:54.548454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0529 13:58:54.554949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0529 13:58:54.558802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0529 13:58:54.561159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0529 13:58:54.563734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0529 13:58:54.563780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0529 13:58:54.563794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0529 13:58:54.566473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0529 13:58:54.569308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0529 13:58:54.572288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0529 13:58:54.576901 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0529 13:58:54.577007 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0529 13:58:54.577029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0529 13:58:54.579630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0529 13:58:54.582226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0529 13:58:54.584631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0529 13:58:54.588030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0529 13:58:54.590555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0529 13:58:54.593163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0529 13:58:54.596924 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.596966 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.597328 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.620954 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.637658 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.655787 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.689410 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.708860 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.724908 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:58:54.743460 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 13:59:11.771937 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-29 13:59:11.771915436 +0000 UTC m=+17.312523393 I0529 13:59:12.474118 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 13:59:12.474104204 +0000 UTC m=+18.014712181 I0529 13:59:12.475167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 13:59:12.475215 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-29 13:59:12.475204277 +0000 UTC m=+18.015812254 E0529 13:59:12.487760 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 13:59:12.487816 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-29 13:59:12.487808813 +0000 UTC m=+18.028416770 E0529 13:59:12.487839 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 13:59:12.495099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:12.495380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 13:59:12.495453 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-29 13:59:12.495444322 +0000 UTC m=+18.036052289 E0529 13:59:12.499258 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0529 13:59:12.499421 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 13:59:12.499531 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 13:59:12.499683 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0529 13:59:12.528199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:12.538230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4ntcx" condition "Approved" to 2026-05-29 13:59:12.538218298 +0000 UTC m=+18.078826255 I0529 13:59:12.554516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4ntcx" condition "Ready" to 2026-05-29 13:59:12.554505467 +0000 UTC m=+18.095113424 I0529 13:59:12.577761 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 13:59:12.577748347 +0000 UTC m=+18.118356334 I0529 13:59:12.595036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:12.595443 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 13:59:12.595435751 +0000 UTC m=+18.136043708 I0529 13:59:12.600451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:12.603634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:12.603881 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 13:59:12.603872939 +0000 UTC m=+18.144480896 I0529 13:59:17.499771 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 13:59:17.499757641 +0000 UTC m=+23.040365618 I0529 13:59:39.668148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 13:59:39.668260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 13:59:39.668220232 +0000 UTC m=+45.208828209 I0529 13:59:39.668460 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 13:59:39.668444134 +0000 UTC m=+45.209052091 I0529 13:59:39.685890 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-29 13:59:39.68587993 +0000 UTC m=+45.226487877 I0529 13:59:39.692732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:39.692849 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 13:59:39.692840524 +0000 UTC m=+45.233448491 I0529 13:59:40.093749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 13:59:40.125174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ntmcq" condition "Approved" to 2026-05-29 13:59:40.125165562 +0000 UTC m=+45.665773519 I0529 13:59:40.151460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ntmcq" condition "Ready" to 2026-05-29 13:59:40.151449172 +0000 UTC m=+45.692057139 I0529 13:59:40.175666 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 13:59:40.17565492 +0000 UTC m=+45.716262867 I0529 13:59:40.198355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:03:35.714263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-05-29 14:03:35.714238069 +0000 UTC m=+281.254846026 I0529 14:03:35.714558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:03:35.714593 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-05-29 14:03:35.714586165 +0000 UTC m=+281.255194112 I0529 14:03:35.731590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:03:35.731640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:03:35.731655 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-05-29 14:03:35.731649758 +0000 UTC m=+281.272257705 I0529 14:03:35.879377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-tr928" condition "Approved" to 2026-05-29 14:03:35.879363317 +0000 UTC m=+281.419971284 I0529 14:03:35.908562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-tr928" condition "Ready" to 2026-05-29 14:03:35.908551879 +0000 UTC m=+281.449159836 I0529 14:03:35.941636 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:03:35.941624727 +0000 UTC m=+281.482232674 I0529 14:03:35.968473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:03:35.968995 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:03:35.968987048 +0000 UTC m=+281.509595015 I0529 14:03:35.988528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:03:35.988888 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:03:35.98887828 +0000 UTC m=+281.529486237 I0529 14:04:40.147873 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-29 14:04:40.147836191 +0000 UTC m=+345.688444148 I0529 14:04:40.148166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:04:40.148222 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 14:04:40.148210936 +0000 UTC m=+345.688818923 E0529 14:04:40.190647 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 14:04:40.190707 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-29 14:04:40.190696094 +0000 UTC m=+345.731304071 E0529 14:04:40.190777 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 14:04:40.193903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:04:40.193982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:04:40.194052 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 14:04:40.194042654 +0000 UTC m=+345.734650611 E0529 14:04:40.226288 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0529 14:04:40.226601 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 14:04:40.226646 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 14:04:40.227058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0529 14:04:40.251879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tzqpt" condition "Approved" to 2026-05-29 14:04:40.25186899 +0000 UTC m=+345.792476947 I0529 14:04:40.264140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tzqpt" condition "Ready" to 2026-05-29 14:04:40.2641272 +0000 UTC m=+345.804735187 I0529 14:04:40.286699 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:04:40.286687624 +0000 UTC m=+345.827295581 I0529 14:04:40.299770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:04:40.300170 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:04:40.300159464 +0000 UTC m=+345.840767431 I0529 14:04:40.317511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:04:45.227060 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:04:45.227042708 +0000 UTC m=+350.767650695 I0529 14:05:24.554195 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-29 14:05:24.554161297 +0000 UTC m=+390.094769244 I0529 14:05:24.554559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:24.554909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:24.555438 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-29 14:05:24.555428304 +0000 UTC m=+390.096036271 I0529 14:05:24.555698 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-29 14:05:24.555694578 +0000 UTC m=+390.096302515 I0529 14:05:24.561636 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-29 14:05:24.561615359 +0000 UTC m=+390.102223326 I0529 14:05:24.574928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:24.574966 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-29 14:05:24.574959143 +0000 UTC m=+390.115567100 I0529 14:05:24.575168 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-29 14:05:24.575162876 +0000 UTC m=+390.115770833 I0529 14:05:24.589502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.589557 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-29 14:05:24.589550193 +0000 UTC m=+390.130158150 I0529 14:05:24.592460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.592508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:24.592532 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-29 14:05:24.592527884 +0000 UTC m=+390.133135831 I0529 14:05:24.594998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.595030 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-29 14:05:24.595026828 +0000 UTC m=+390.135634775 I0529 14:05:24.698341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.721259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.729385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qxr8q" condition "Approved" to 2026-05-29 14:05:24.729370784 +0000 UTC m=+390.269978741 I0529 14:05:24.755188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qxr8q" condition "Ready" to 2026-05-29 14:05:24.755176628 +0000 UTC m=+390.295784585 I0529 14:05:24.759155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bpr45" condition "Approved" to 2026-05-29 14:05:24.759148154 +0000 UTC m=+390.299756111 I0529 14:05:24.772965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bpr45" condition "Ready" to 2026-05-29 14:05:24.772955213 +0000 UTC m=+390.313563180 I0529 14:05:24.782496 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:24.782485164 +0000 UTC m=+390.323093121 I0529 14:05:24.801243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:24.802974 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:24.802963135 +0000 UTC m=+390.343571092 I0529 14:05:24.805854 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:24.805842255 +0000 UTC m=+390.346450212 I0529 14:05:24.883048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:25.114396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:25.118776 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:25.118768432 +0000 UTC m=+390.659376369 I0529 14:05:25.135788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:25.374124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:25.626052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:25.678059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xq9wj" condition "Approved" to 2026-05-29 14:05:25.678040445 +0000 UTC m=+391.218648432 I0529 14:05:25.989218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xq9wj" condition "Ready" to 2026-05-29 14:05:25.989202344 +0000 UTC m=+391.529810331 I0529 14:05:26.226383 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:26.226368144 +0000 UTC m=+391.766976091 I0529 14:05:26.327491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:26.327976 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:26.327966875 +0000 UTC m=+391.868574842 I0529 14:05:26.574941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:26.625097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:26.725869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:35.292190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:35.292229 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" condition "Issuing" to 2026-05-29 14:05:35.29221576 +0000 UTC m=+400.832823707 I0529 14:05:35.293310 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" condition "Ready" to 2026-05-29 14:05:35.293294164 +0000 UTC m=+400.833902121 I0529 14:05:35.305769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2chw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:35.305884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" condition "Ready" to 2026-05-29 14:05:35.305876285 +0000 UTC m=+400.846484242 I0529 14:05:35.563832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2chw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:35.681216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2chw-9mf68" condition "Approved" to 2026-05-29 14:05:35.681204753 +0000 UTC m=+401.221812700 I0529 14:05:35.775807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2chw-9mf68" condition "Ready" to 2026-05-29 14:05:35.775796862 +0000 UTC m=+401.316404799 I0529 14:05:35.892176 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:35.892158846 +0000 UTC m=+401.432766803 I0529 14:05:35.945727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2chw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:35.946168 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:35.946161516 +0000 UTC m=+401.486769473 I0529 14:05:35.983757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2chw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:35.995253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2chw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2chw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:46.073169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:05:46.073257 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-29 14:05:46.073246354 +0000 UTC m=+411.613854301 I0529 14:05:46.073898 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-29 14:05:46.073892443 +0000 UTC m=+411.614500390 I0529 14:05:46.096240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:46.096392 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-29 14:05:46.096385093 +0000 UTC m=+411.636993040 I0529 14:05:46.281487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:05:46.314644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-29rrn" condition "Approved" to 2026-05-29 14:05:46.314630392 +0000 UTC m=+411.855238349 I0529 14:05:46.338630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-29rrn" condition "Ready" to 2026-05-29 14:05:46.338620043 +0000 UTC m=+411.879227990 I0529 14:05:46.367579 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:05:46.367569578 +0000 UTC m=+411.908177515 I0529 14:05:46.387219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:08:59.249021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:08:59.249045 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-29 14:08:59.249021271 +0000 UTC m=+604.789629248 I0529 14:08:59.249064 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-29 14:08:59.249053991 +0000 UTC m=+604.789661968 I0529 14:08:59.263834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:08:59.263892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:08:59.263917 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-29 14:08:59.263910854 +0000 UTC m=+604.804518821 I0529 14:08:59.631798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:08:59.644363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6rbrs" condition "Approved" to 2026-05-29 14:08:59.644350479 +0000 UTC m=+605.184958456 I0529 14:08:59.670590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6rbrs" condition "Ready" to 2026-05-29 14:08:59.670579964 +0000 UTC m=+605.211187921 I0529 14:08:59.698480 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:08:59.698463139 +0000 UTC m=+605.239071116 I0529 14:08:59.721879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:08:59.722874 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:08:59.722863964 +0000 UTC m=+605.263471921 I0529 14:08:59.744568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:08:59.744843 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:08:59.744834941 +0000 UTC m=+605.285442888 I0529 14:09:37.439322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 14:09:37.439397 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 14:09:37.439388091 +0000 UTC m=+642.979996078 I0529 14:09:37.439903 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 14:09:37.439895288 +0000 UTC m=+642.980503265 I0529 14:09:37.462755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:09:37.462812 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 14:09:37.462805061 +0000 UTC m=+643.003413018 I0529 14:09:37.724782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 14:09:37.785543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qn7lb" condition "Approved" to 2026-05-29 14:09:37.785534495 +0000 UTC m=+643.326142452 I0529 14:09:37.810402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qn7lb" condition "Ready" to 2026-05-29 14:09:37.810393172 +0000 UTC m=+643.351001129 I0529 14:09:37.837055 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 14:09:37.837042139 +0000 UTC m=+643.377650096 I0529 14:09:37.866023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"