I0522 18:58:14.910860 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0522 18:58:14.911138 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0522 18:58:14.911305 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0522 18:58:14.914984 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0522 18:58:14.915371 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0522 18:58:14.915435 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0522 18:58:14.915390 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0522 18:58:14.918337 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0522 18:58:14.933518 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0522 18:58:14.933744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0522 18:58:14.937598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0522 18:58:14.940317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0522 18:58:14.944879 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0522 18:58:14.944913 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0522 18:58:14.944914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0522 18:58:14.947569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0522 18:58:14.949968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0522 18:58:14.952186 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0522 18:58:14.952316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0522 18:58:14.954110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0522 18:58:14.956036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0522 18:58:14.957882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0522 18:58:14.963307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0522 18:58:14.967377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0522 18:58:14.967528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0522 18:58:14.969287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0522 18:58:14.971049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0522 18:58:14.972968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0522 18:58:14.974663 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0522 18:58:14.974696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0522 18:58:14.976696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0522 18:58:14.978534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0522 18:58:14.984054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0522 18:58:14.986162 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:14.986756 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:14.987024 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:14.987364 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.002271 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.015809 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.034313 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.055505 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.069985 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:15.071239 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 18:58:30.642684 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-22 18:58:30.642667133 +0000 UTC m=+15.759928939 I0522 18:58:31.371364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 18:58:31.371390 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-22 18:58:31.371376774 +0000 UTC m=+16.488638580 I0522 18:58:31.371434 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-22 18:58:31.371427185 +0000 UTC m=+16.488688991 E0522 18:58:31.390677 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 18:58:31.390762 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-22 18:58:31.390753946 +0000 UTC m=+16.508015752 E0522 18:58:31.390794 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 18:58:31.394824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:31.394886 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-22 18:58:31.394878903 +0000 UTC m=+16.512140709 E0522 18:58:31.410496 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0522 18:58:31.411960 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 18:58:31.412033 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 18:58:31.413127 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0522 18:58:31.417927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:31.418064 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-22 18:58:31.418025733 +0000 UTC m=+16.535287559 I0522 18:58:31.425232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7ms2v" condition "Approved" to 2026-05-22 18:58:31.42522097 +0000 UTC m=+16.542482776 I0522 18:58:31.432153 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-22 18:58:31.432141522 +0000 UTC m=+16.549403368 I0522 18:58:31.440993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:31.441671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7ms2v" condition "Ready" to 2026-05-22 18:58:31.441663594 +0000 UTC m=+16.558925400 I0522 18:58:31.557892 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 18:58:31.557854196 +0000 UTC m=+16.675116022 I0522 18:58:31.625603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:31.626347 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 18:58:31.626336744 +0000 UTC m=+16.743598580 I0522 18:58:31.703855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:31.706103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:36.411964 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 18:58:36.41195128 +0000 UTC m=+21.529213116 I0522 18:58:59.050950 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-22 18:58:59.050932219 +0000 UTC m=+44.168194015 I0522 18:58:59.051312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 18:58:59.051333 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-22 18:58:59.051329517 +0000 UTC m=+44.168591323 I0522 18:58:59.065174 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-22 18:58:59.060196929 +0000 UTC m=+44.177458735 I0522 18:58:59.095834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:59.095926 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-22 18:58:59.095907342 +0000 UTC m=+44.213169138 I0522 18:58:59.492367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:59.525435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pz47f" condition "Approved" to 2026-05-22 18:58:59.52541563 +0000 UTC m=+44.642677436 I0522 18:58:59.557387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pz47f" condition "Ready" to 2026-05-22 18:58:59.557371856 +0000 UTC m=+44.674633662 I0522 18:58:59.592254 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 18:58:59.592240331 +0000 UTC m=+44.709502137 I0522 18:58:59.616200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 18:58:59.616485 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 18:58:59.616479218 +0000 UTC m=+44.733741014 I0522 18:58:59.639383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:03:19.376142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-05-22 19:03:19.376111046 +0000 UTC m=+304.493372852 I0522 19:03:19.376544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:03:19.376579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-05-22 19:03:19.376573605 +0000 UTC m=+304.493835401 I0522 19:03:19.403452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:03:19.403539 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-05-22 19:03:19.403531608 +0000 UTC m=+304.520793414 I0522 19:03:19.642489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:03:19.665415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-ldtgx" condition "Approved" to 2026-05-22 19:03:19.665403317 +0000 UTC m=+304.782665123 I0522 19:03:19.693812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-ldtgx" condition "Ready" to 2026-05-22 19:03:19.693798999 +0000 UTC m=+304.811060805 I0522 19:03:19.720247 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:03:19.72023214 +0000 UTC m=+304.837493936 I0522 19:03:19.741144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:04:24.092041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:04:24.092087 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-22 19:04:24.092076596 +0000 UTC m=+369.209338442 I0522 19:04:24.092039 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-22 19:04:24.091968634 +0000 UTC m=+369.209230470 E0522 19:04:24.104327 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 19:04:24.104360 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-22 19:04:24.104353609 +0000 UTC m=+369.221615415 E0522 19:04:24.104398 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 19:04:24.107053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:04:24.107099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:04:24.107115 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-22 19:04:24.107110762 +0000 UTC m=+369.224372568 E0522 19:04:24.114513 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0522 19:04:24.114708 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 19:04:24.114801 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 19:04:24.114888 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0522 19:04:24.145182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:04:24.149534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r2sjk" condition "Approved" to 2026-05-22 19:04:24.149520069 +0000 UTC m=+369.266781905 I0522 19:04:24.163669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r2sjk" condition "Ready" to 2026-05-22 19:04:24.163659058 +0000 UTC m=+369.280920874 I0522 19:04:24.183049 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:04:24.183037657 +0000 UTC m=+369.300299463 I0522 19:04:24.196917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:04:24.197504 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:04:24.197494952 +0000 UTC m=+369.314756758 I0522 19:04:24.212315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:04:29.114937 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:04:29.11492313 +0000 UTC m=+374.232184966 I0522 19:05:08.595630 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-22 19:05:08.595591149 +0000 UTC m=+413.712852945 I0522 19:05:08.595687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:08.595728 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-22 19:05:08.595719151 +0000 UTC m=+413.712980957 I0522 19:05:08.604945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:08.604979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-22 19:05:08.60497257 +0000 UTC m=+413.722234376 I0522 19:05:08.605225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-22 19:05:08.605221245 +0000 UTC m=+413.722483051 I0522 19:05:08.605469 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-22 19:05:08.60546568 +0000 UTC m=+413.722727486 I0522 19:05:08.605720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:08.605738 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-22 19:05:08.605734624 +0000 UTC m=+413.722996430 I0522 19:05:08.657592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:08.657983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:08.658011 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-22 19:05:08.658004937 +0000 UTC m=+413.775266733 I0522 19:05:08.659777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:08.659813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:08.659825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-22 19:05:08.659822401 +0000 UTC m=+413.777084197 I0522 19:05:08.671141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:08.671207 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-22 19:05:08.671201288 +0000 UTC m=+413.788463084 I0522 19:05:08.824331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:08.909396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdtnj" condition "Approved" to 2026-05-22 19:05:08.909380252 +0000 UTC m=+414.026642078 I0522 19:05:08.953836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdtnj" condition "Ready" to 2026-05-22 19:05:08.953825733 +0000 UTC m=+414.071087539 I0522 19:05:09.069016 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:09.069000002 +0000 UTC m=+414.186261808 I0522 19:05:09.105341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:09.116854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hhfvf" condition "Approved" to 2026-05-22 19:05:09.116843623 +0000 UTC m=+414.234105419 I0522 19:05:09.146148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hhfvf" condition "Ready" to 2026-05-22 19:05:09.146139528 +0000 UTC m=+414.263401324 I0522 19:05:09.174657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:09.175415 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:09.175400541 +0000 UTC m=+414.292662337 I0522 19:05:09.207415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:09.207848 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:09.207841532 +0000 UTC m=+414.325103348 I0522 19:05:09.252155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:09.518343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:09.540489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7pnth" condition "Approved" to 2026-05-22 19:05:09.540480073 +0000 UTC m=+414.657741859 I0522 19:05:09.648370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7pnth" condition "Ready" to 2026-05-22 19:05:09.64836116 +0000 UTC m=+414.765622956 I0522 19:05:10.094699 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:10.094684591 +0000 UTC m=+415.211946407 I0522 19:05:10.185837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:10.186179 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:10.186172817 +0000 UTC m=+415.303434623 I0522 19:05:10.436041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:10.485360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:17.225549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:17.225669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" condition "Issuing" to 2026-05-22 19:05:17.225636392 +0000 UTC m=+422.342898228 I0522 19:05:17.226354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" condition "Ready" to 2026-05-22 19:05:17.226319844 +0000 UTC m=+422.343581680 I0522 19:05:17.244467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:17.244561 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" condition "Ready" to 2026-05-22 19:05:17.244553554 +0000 UTC m=+422.361815360 I0522 19:05:17.979654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:18.167151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5c5sx-p6wvk" condition "Approved" to 2026-05-22 19:05:18.167141067 +0000 UTC m=+423.284402883 I0522 19:05:18.209440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5c5sx-p6wvk" condition "Ready" to 2026-05-22 19:05:18.209422912 +0000 UTC m=+423.326684748 I0522 19:05:18.235867 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:18.23585746 +0000 UTC m=+423.353119266 I0522 19:05:18.258783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5c5sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:28.743699 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-22 19:05:28.743677417 +0000 UTC m=+433.860939213 I0522 19:05:28.743812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:28.743833 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-22 19:05:28.743829339 +0000 UTC m=+433.861091135 I0522 19:05:28.760881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:28.760975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:05:28.761010 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-22 19:05:28.761003817 +0000 UTC m=+433.878265623 I0522 19:05:28.902042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:28.912420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hcnkt" condition "Approved" to 2026-05-22 19:05:28.912406567 +0000 UTC m=+434.029668373 I0522 19:05:28.937600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hcnkt" condition "Ready" to 2026-05-22 19:05:28.937588459 +0000 UTC m=+434.054850255 I0522 19:05:28.963645 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:05:28.963633357 +0000 UTC m=+434.080895153 I0522 19:05:28.986010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:05:29.034319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:08:56.458391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-22 19:08:56.45836847 +0000 UTC m=+641.575630276 I0522 19:08:56.458504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:08:56.458538 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-22 19:08:56.458529723 +0000 UTC m=+641.575791539 I0522 19:08:56.481020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:08:56.481107 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-22 19:08:56.481097848 +0000 UTC m=+641.598359664 I0522 19:08:56.652513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:08:56.692629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m4bnm" condition "Approved" to 2026-05-22 19:08:56.692617716 +0000 UTC m=+641.809879512 I0522 19:08:56.715751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m4bnm" condition "Ready" to 2026-05-22 19:08:56.71573586 +0000 UTC m=+641.832997666 I0522 19:08:56.751854 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:08:56.751844611 +0000 UTC m=+641.869106407 I0522 19:08:56.773096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:08:56.773459 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:08:56.77345242 +0000 UTC m=+641.890714226 I0522 19:08:56.806522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:09:37.756825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 19:09:37.756919 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-22 19:09:37.756906311 +0000 UTC m=+682.874168147 I0522 19:09:37.757707 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-22 19:09:37.757696754 +0000 UTC m=+682.874958580 I0522 19:09:37.782683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:09:37.782730 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-22 19:09:37.782723877 +0000 UTC m=+682.899985683 I0522 19:09:37.919537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 19:09:37.950473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-msm4z" condition "Approved" to 2026-05-22 19:09:37.950455832 +0000 UTC m=+683.067717638 I0522 19:09:37.970282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-msm4z" condition "Ready" to 2026-05-22 19:09:37.97027261 +0000 UTC m=+683.087534396 I0522 19:09:38.000292 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 19:09:38.000264235 +0000 UTC m=+683.117526091 I0522 19:09:38.021903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"