I0507 03:17:17.100629 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0507 03:17:17.100742 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0507 03:17:17.100965 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0507 03:17:17.103938 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0507 03:17:17.104381 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0507 03:17:17.104484 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0507 03:17:17.104509 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0507 03:17:17.106931 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0507 03:17:17.120170 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0507 03:17:17.120426 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0507 03:17:17.125352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0507 03:17:17.132837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0507 03:17:17.136760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0507 03:17:17.139036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0507 03:17:17.141449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0507 03:17:17.144011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0507 03:17:17.146211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0507 03:17:17.149891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0507 03:17:17.151396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0507 03:17:17.156297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0507 03:17:17.161214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0507 03:17:17.164075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0507 03:17:17.166601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0507 03:17:17.168917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0507 03:17:17.170819 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0507 03:17:17.170844 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0507 03:17:17.170851 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0507 03:17:17.170955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0507 03:17:17.172671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0507 03:17:17.174404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0507 03:17:17.176174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0507 03:17:17.176194 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0507 03:17:17.176459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0507 03:17:17.182414 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.182572 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.182850 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.184185 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.197483 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.216852 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.266533 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.275818 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.280880 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:17.304373 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 03:17:27.939397 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-07 03:17:27.939387045 +0000 UTC m=+10.868315655 I0507 03:17:28.675229 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 03:17:28.675214235 +0000 UTC m=+11.604142895 I0507 03:17:28.676265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:17:28.676292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 03:17:28.676285811 +0000 UTC m=+11.605214461 I0507 03:17:28.691207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:28.691275 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 03:17:28.691267162 +0000 UTC m=+11.620195792 E0507 03:17:28.693956 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 03:17:28.694090 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-07 03:17:28.694078624 +0000 UTC m=+11.623007254 E0507 03:17:28.694209 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 03:17:28.706323 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0507 03:17:28.706509 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 03:17:28.706542 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 03:17:28.706617 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0507 03:17:28.708168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:28.728572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j7rr6" condition "Approved" to 2026-05-07 03:17:28.728526315 +0000 UTC m=+11.657454995 I0507 03:17:28.740338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j7rr6" condition "Ready" to 2026-05-07 03:17:28.740325599 +0000 UTC m=+11.669254229 I0507 03:17:28.763674 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:17:28.763666816 +0000 UTC m=+11.692595436 I0507 03:17:28.780314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:28.828636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:33.707596 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:17:33.707549578 +0000 UTC m=+16.636478228 I0507 03:17:54.793140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 03:17:54.793101635 +0000 UTC m=+37.722030265 I0507 03:17:54.793823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:17:54.793898 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 03:17:54.793891745 +0000 UTC m=+37.722820375 I0507 03:17:54.810732 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-07 03:17:54.810718677 +0000 UTC m=+37.739647297 I0507 03:17:54.820736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:54.820819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:17:54.820841 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 03:17:54.820834668 +0000 UTC m=+37.749763308 I0507 03:17:55.049669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nsgrm" condition "Approved" to 2026-05-07 03:17:55.049653469 +0000 UTC m=+37.978582119 I0507 03:17:55.080615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nsgrm" condition "Ready" to 2026-05-07 03:17:55.080598235 +0000 UTC m=+38.009526865 I0507 03:17:55.111300 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:17:55.111283818 +0000 UTC m=+38.040212458 I0507 03:17:55.161903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:55.162327 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:17:55.162320502 +0000 UTC m=+38.091249132 I0507 03:17:55.183995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:55.184738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:17:55.185075 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:17:55.185066786 +0000 UTC m=+38.113995416 I0507 03:22:58.563931 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-07 03:22:58.563913065 +0000 UTC m=+341.492841715 I0507 03:22:58.564461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:22:58.565146 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-05-07 03:22:58.565138703 +0000 UTC m=+341.494067363 I0507 03:22:58.604707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:22:58.604774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-07 03:22:58.604766052 +0000 UTC m=+341.533694702 I0507 03:22:58.783712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:22:58.839850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-nkjmp" condition "Approved" to 2026-05-07 03:22:58.839822258 +0000 UTC m=+341.768750918 I0507 03:22:58.867345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-nkjmp" condition "Ready" to 2026-05-07 03:22:58.867333288 +0000 UTC m=+341.796261918 I0507 03:22:58.951557 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:22:58.95154433 +0000 UTC m=+341.880472960 I0507 03:22:59.115608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:22:59.116089 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:22:59.116082185 +0000 UTC m=+342.045010815 I0507 03:22:59.228696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:22:59.236836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:04.240059 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 03:24:04.240036578 +0000 UTC m=+407.168965238 I0507 03:24:04.240088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:04.240524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 03:24:04.240506185 +0000 UTC m=+407.169434875 E0507 03:24:04.608673 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 03:24:04.608714 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-07 03:24:04.608706799 +0000 UTC m=+407.537635429 E0507 03:24:04.608754 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 03:24:04.612439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:04.612537 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 03:24:04.612529722 +0000 UTC m=+407.541458352 E0507 03:24:05.087074 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0507 03:24:05.087509 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 03:24:05.087555 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 03:24:05.087627 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0507 03:24:05.092888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:05.092943 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 03:24:05.092936205 +0000 UTC m=+408.021864845 I0507 03:24:05.126672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mrwnr" condition "Approved" to 2026-05-07 03:24:05.126661528 +0000 UTC m=+408.055590158 I0507 03:24:05.132504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:05.153743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mrwnr" condition "Ready" to 2026-05-07 03:24:05.153733158 +0000 UTC m=+408.082661798 I0507 03:24:05.194800 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:05.194788744 +0000 UTC m=+408.123717374 I0507 03:24:05.218703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:05.219028 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:05.219021755 +0000 UTC m=+408.147950385 I0507 03:24:05.236097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:05.238257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:05.238452 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:05.238445007 +0000 UTC m=+408.167373637 I0507 03:24:10.087611 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:10.087597638 +0000 UTC m=+413.016526298 I0507 03:24:48.975927 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 03:24:48.975916559 +0000 UTC m=+451.904845179 I0507 03:24:48.976894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:48.976940 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 03:24:48.976936342 +0000 UTC m=+451.905864962 I0507 03:24:48.982668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:48.982696 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 03:24:48.982689362 +0000 UTC m=+451.911617982 I0507 03:24:48.983339 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 03:24:48.98332994 +0000 UTC m=+451.912258580 I0507 03:24:49.026283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.028757 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 03:24:49.028738192 +0000 UTC m=+451.957666852 I0507 03:24:49.029182 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 03:24:49.029174118 +0000 UTC m=+451.958102768 I0507 03:24:49.029735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:49.029760 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 03:24:49.029753496 +0000 UTC m=+451.958682156 I0507 03:24:49.042196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.043605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:49.043638 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 03:24:49.043633896 +0000 UTC m=+451.972562516 I0507 03:24:49.062230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.062289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 03:24:49.062282401 +0000 UTC m=+451.991211031 I0507 03:24:49.182308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.214829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sdbmz" condition "Approved" to 2026-05-07 03:24:49.214816231 +0000 UTC m=+452.143744901 I0507 03:24:49.235977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sdbmz" condition "Ready" to 2026-05-07 03:24:49.23596739 +0000 UTC m=+452.164896020 I0507 03:24:49.304694 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:49.304685051 +0000 UTC m=+452.233613671 I0507 03:24:49.333467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.333790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c75f8" condition "Approved" to 2026-05-07 03:24:49.33376478 +0000 UTC m=+452.262693400 I0507 03:24:49.335014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.352587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c75f8" condition "Ready" to 2026-05-07 03:24:49.352578148 +0000 UTC m=+452.281506768 I0507 03:24:49.394242 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:49.394227858 +0000 UTC m=+452.323156478 I0507 03:24:49.423820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.463782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.666403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:49.973056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t9nbw" condition "Approved" to 2026-05-07 03:24:49.973027696 +0000 UTC m=+452.901956356 I0507 03:24:50.332151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t9nbw" condition "Ready" to 2026-05-07 03:24:50.332142651 +0000 UTC m=+453.261071271 I0507 03:24:50.615606 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:50.615591592 +0000 UTC m=+453.544520222 I0507 03:24:50.716056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:58.028740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:24:58.028778 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" condition "Issuing" to 2026-05-07 03:24:58.028773722 +0000 UTC m=+460.957702352 I0507 03:24:58.028565 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" condition "Ready" to 2026-05-07 03:24:58.028526758 +0000 UTC m=+460.957455388 I0507 03:24:58.058084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:58.058167 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" condition "Ready" to 2026-05-07 03:24:58.058160972 +0000 UTC m=+460.987089582 I0507 03:24:58.173987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:24:58.207887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4p7cp-rrkrq" condition "Approved" to 2026-05-07 03:24:58.207867484 +0000 UTC m=+461.136796144 I0507 03:24:58.226507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4p7cp-rrkrq" condition "Ready" to 2026-05-07 03:24:58.226492819 +0000 UTC m=+461.155421479 I0507 03:24:58.264029 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:24:58.26401351 +0000 UTC m=+461.192942140 I0507 03:24:58.282978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4p7cp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:25:14.954719 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 03:25:14.954670551 +0000 UTC m=+477.883599201 I0507 03:25:14.955481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:25:14.955588 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 03:25:14.955578624 +0000 UTC m=+477.884507284 I0507 03:25:14.968381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:25:14.968577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:25:14.968650 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 03:25:14.9686415 +0000 UTC m=+477.897570140 I0507 03:25:15.180774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:25:15.188702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cwkld" condition "Approved" to 2026-05-07 03:25:15.18869357 +0000 UTC m=+478.117622200 I0507 03:25:15.214061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cwkld" condition "Ready" to 2026-05-07 03:25:15.214048844 +0000 UTC m=+478.142977474 I0507 03:25:15.241701 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:25:15.241688968 +0000 UTC m=+478.170617598 I0507 03:25:15.258980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:25:15.259202 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:25:15.259195995 +0000 UTC m=+478.188124615 I0507 03:25:15.274099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:25:15.275365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:28:35.632563 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 03:28:35.632543959 +0000 UTC m=+678.561472619 I0507 03:28:35.633001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:28:35.633034 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 03:28:35.633026702 +0000 UTC m=+678.561955352 I0507 03:28:35.653418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:28:35.653474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 03:28:35.653467363 +0000 UTC m=+678.582395993 I0507 03:28:35.851411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:28:35.878234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lr2wt" condition "Approved" to 2026-05-07 03:28:35.87822517 +0000 UTC m=+678.807153800 I0507 03:28:35.900279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lr2wt" condition "Ready" to 2026-05-07 03:28:35.900269325 +0000 UTC m=+678.829197955 I0507 03:28:35.937461 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:28:35.937449807 +0000 UTC m=+678.866378427 I0507 03:28:35.957374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:28:35.958076 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:28:35.958069252 +0000 UTC m=+678.886997862 I0507 03:28:35.977376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:29:19.046890 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-07 03:29:19.046872894 +0000 UTC m=+721.975801544 I0507 03:29:19.047631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:29:19.049245 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 03:29:19.049229323 +0000 UTC m=+721.978157993 I0507 03:29:19.072316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:29:19.072398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 03:29:19.072411 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 03:29:19.072406491 +0000 UTC m=+722.001335101 I0507 03:29:19.505238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 03:29:19.510205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hv8rl" condition "Approved" to 2026-05-07 03:29:19.510183214 +0000 UTC m=+722.439111844 I0507 03:29:19.528986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hv8rl" condition "Ready" to 2026-05-07 03:29:19.528975233 +0000 UTC m=+722.457903853 I0507 03:29:19.557238 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:29:19.557229488 +0000 UTC m=+722.486158118 I0507 03:29:19.576562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"