I0525 10:07:28.358689 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0525 10:07:28.358850 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0525 10:07:28.358948 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0525 10:07:28.363647 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0525 10:07:28.364029 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0525 10:07:28.364068 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0525 10:07:28.364019 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0525 10:07:28.366670 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0525 10:07:28.380627 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0525 10:07:28.384359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0525 10:07:28.387144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0525 10:07:28.394044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0525 10:07:28.396411 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0525 10:07:28.396429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0525 10:07:28.396440 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0525 10:07:28.396440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0525 10:07:28.398685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0525 10:07:28.400365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0525 10:07:28.401967 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0525 10:07:28.401985 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0525 10:07:28.402157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0525 10:07:28.404544 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0525 10:07:28.404630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0525 10:07:28.409643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0525 10:07:28.412268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0525 10:07:28.414553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0525 10:07:28.416768 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0525 10:07:28.419381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0525 10:07:28.421858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0525 10:07:28.424505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0525 10:07:28.426731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0525 10:07:28.428458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0525 10:07:28.433330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0525 10:07:28.435844 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.436997 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.437355 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.439374 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.452824 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.472398 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.484607 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.496440 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.512312 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:28.517065 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 10:07:39.420504 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-25 10:07:39.420488933 +0000 UTC m=+11.089627437 I0525 10:07:40.096572 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-25 10:07:40.096557999 +0000 UTC m=+11.765696503 I0525 10:07:40.097674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:07:40.097720 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 10:07:40.097713807 +0000 UTC m=+11.766852311 E0525 10:07:40.123632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 10:07:40.123705 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-25 10:07:40.123696933 +0000 UTC m=+11.792835437 E0525 10:07:40.123737 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 10:07:40.128262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:07:40.128397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:07:40.128429 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 10:07:40.128421435 +0000 UTC m=+11.797559939 E0525 10:07:40.365588 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0525 10:07:40.365653 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 10:07:40.365679 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 10:07:40.365704 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0525 10:07:40.471024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:07:40.472306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mtncs" condition "Approved" to 2026-05-25 10:07:40.472295853 +0000 UTC m=+12.141434317 I0525 10:07:40.487153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mtncs" condition "Ready" to 2026-05-25 10:07:40.48714478 +0000 UTC m=+12.156283244 I0525 10:07:40.815707 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:07:40.815694905 +0000 UTC m=+12.484833399 I0525 10:07:40.875108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:07:45.366362 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:07:45.366345568 +0000 UTC m=+17.035484042 I0525 10:08:08.503967 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-25 10:08:08.50391719 +0000 UTC m=+40.173055694 I0525 10:08:08.504409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:08:08.504441 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 10:08:08.504433968 +0000 UTC m=+40.173572472 I0525 10:08:08.513386 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-25 10:08:08.513374904 +0000 UTC m=+40.182513378 I0525 10:08:08.529006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:08:08.529417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:08:08.529454 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 10:08:08.529446721 +0000 UTC m=+40.198585195 I0525 10:08:08.771537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:08:08.783427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l8svw" condition "Approved" to 2026-05-25 10:08:08.783376489 +0000 UTC m=+40.452514993 I0525 10:08:08.819221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l8svw" condition "Ready" to 2026-05-25 10:08:08.819208654 +0000 UTC m=+40.488347128 I0525 10:08:08.859921 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:08:08.859908942 +0000 UTC m=+40.529047416 I0525 10:08:08.880309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:08:08.880561 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:08:08.880551601 +0000 UTC m=+40.549690065 I0525 10:08:08.904479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:12:54.356555 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready" to 2026-05-25 10:12:54.35654837 +0000 UTC m=+326.025686834 I0525 10:12:54.356895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:12:54.356923 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Issuing" to 2026-05-25 10:12:54.356920126 +0000 UTC m=+326.026058590 I0525 10:12:54.371015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:12:54.371070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:12:54.371235 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Issuing" to 2026-05-25 10:12:54.371078405 +0000 UTC m=+326.040216879 I0525 10:12:54.559538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:12:54.573056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-p6v82" condition "Approved" to 2026-05-25 10:12:54.573047622 +0000 UTC m=+326.242186086 I0525 10:12:54.609546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-p6v82" condition "Ready" to 2026-05-25 10:12:54.609531387 +0000 UTC m=+326.278669881 I0525 10:12:54.636716 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:12:54.636700938 +0000 UTC m=+326.305839412 I0525 10:12:54.655277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:13:58.517888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-25 10:13:58.517845478 +0000 UTC m=+390.186983972 I0525 10:13:58.518741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:13:58.518891 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-25 10:13:58.51883538 +0000 UTC m=+390.187973894 E0525 10:13:58.535364 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 10:13:58.535430 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-25 10:13:58.53542119 +0000 UTC m=+390.204559664 E0525 10:13:58.535495 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 10:13:58.537986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:13:58.538121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-25 10:13:58.538113768 +0000 UTC m=+390.207252242 E0525 10:13:58.549008 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0525 10:13:58.549450 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 10:13:58.549507 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 10:13:58.549545 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0525 10:13:58.552657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:13:58.576275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7t4wg" condition "Approved" to 2026-05-25 10:13:58.57625072 +0000 UTC m=+390.245389234 I0525 10:13:58.589656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7t4wg" condition "Ready" to 2026-05-25 10:13:58.589645116 +0000 UTC m=+390.258783590 I0525 10:13:58.611395 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:13:58.611386043 +0000 UTC m=+390.280524517 I0525 10:13:58.629402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:13:58.629879 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:13:58.629838184 +0000 UTC m=+390.298976658 I0525 10:13:58.644211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:03.550375 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:03.550360903 +0000 UTC m=+395.219499407 I0525 10:14:45.402360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:14:45.402399 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-25 10:14:45.402390487 +0000 UTC m=+437.071528961 I0525 10:14:45.403012 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-25 10:14:45.402999371 +0000 UTC m=+437.072137835 I0525 10:14:45.410757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:14:45.418567 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-25 10:14:45.418553964 +0000 UTC m=+437.087692428 I0525 10:14:45.410881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 10:14:45.410874162 +0000 UTC m=+437.080012626 I0525 10:14:45.419573 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-25 10:14:45.419562855 +0000 UTC m=+437.088701309 I0525 10:14:45.419750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:14:45.419766 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-25 10:14:45.419763313 +0000 UTC m=+437.088901777 I0525 10:14:45.450141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.450251 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-25 10:14:45.450242621 +0000 UTC m=+437.119381105 I0525 10:14:45.466734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.466787 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 10:14:45.466781653 +0000 UTC m=+437.135920127 I0525 10:14:45.469188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.469305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:14:45.469372 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-25 10:14:45.469364498 +0000 UTC m=+437.138502962 I0525 10:14:45.724232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.748966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.763440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nns5d" condition "Approved" to 2026-05-25 10:14:45.763431025 +0000 UTC m=+437.432569489 I0525 10:14:45.789225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nns5d" condition "Ready" to 2026-05-25 10:14:45.789214602 +0000 UTC m=+437.458353076 I0525 10:14:45.811380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hcsdw" condition "Approved" to 2026-05-25 10:14:45.811370403 +0000 UTC m=+437.480508857 I0525 10:14:45.842569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hcsdw" condition "Ready" to 2026-05-25 10:14:45.842560599 +0000 UTC m=+437.511699053 I0525 10:14:45.845802 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:45.845794121 +0000 UTC m=+437.514932585 I0525 10:14:45.873514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.873757 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:45.873750357 +0000 UTC m=+437.542888841 I0525 10:14:45.883192 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:45.88318328 +0000 UTC m=+437.552321754 I0525 10:14:45.894359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.906547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:45.906893 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:45.906880633 +0000 UTC m=+437.576019107 E0525 10:14:46.142354 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-t598k\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0525 10:14:46.297423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:46.455054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7qgwg" condition "Approved" to 2026-05-25 10:14:46.455041227 +0000 UTC m=+438.124179691 I0525 10:14:46.913628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7qgwg" condition "Ready" to 2026-05-25 10:14:46.913611291 +0000 UTC m=+438.582749775 E0525 10:14:46.990968 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4qg4m\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0525 10:14:47.194000 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-7qgwg" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-ccwrv" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0525 10:14:47.350110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qlf7x" condition "Approved" to 2026-05-25 10:14:47.350092145 +0000 UTC m=+439.019230649 I0525 10:14:47.458732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qlf7x" condition "Ready" to 2026-05-25 10:14:47.458716248 +0000 UTC m=+439.127854752 I0525 10:14:47.984568 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:47.98455569 +0000 UTC m=+439.653694174 I0525 10:14:48.015097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:48.016625 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:48.016616103 +0000 UTC m=+439.685754587 I0525 10:14:48.220668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:56.037900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:14:56.037956 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" condition "Issuing" to 2026-05-25 10:14:56.037943169 +0000 UTC m=+447.707081673 I0525 10:14:56.038299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" condition "Ready" to 2026-05-25 10:14:56.038259702 +0000 UTC m=+447.707398206 I0525 10:14:56.069375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:56.069469 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" condition "Ready" to 2026-05-25 10:14:56.069459476 +0000 UTC m=+447.738597960 I0525 10:14:56.205356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:56.247134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mjfxp-wfh78" condition "Approved" to 2026-05-25 10:14:56.24711912 +0000 UTC m=+447.916257604 I0525 10:14:56.269587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mjfxp-wfh78" condition "Ready" to 2026-05-25 10:14:56.269574635 +0000 UTC m=+447.938713109 I0525 10:14:56.299528 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:14:56.299515187 +0000 UTC m=+447.968653651 I0525 10:14:56.325754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:14:56.676103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mjfxp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:15:09.898493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:15:09.898738 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-25 10:15:09.898725865 +0000 UTC m=+461.567864369 I0525 10:15:09.898810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-25 10:15:09.898787778 +0000 UTC m=+461.567926282 I0525 10:15:09.979490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:15:09.979570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:15:09.979592 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-25 10:15:09.979583942 +0000 UTC m=+461.648722446 I0525 10:15:10.447231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mp54p" condition "Approved" to 2026-05-25 10:15:10.447220176 +0000 UTC m=+462.116358680 I0525 10:15:10.482065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mp54p" condition "Ready" to 2026-05-25 10:15:10.482052693 +0000 UTC m=+462.151191187 I0525 10:15:10.515482 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:15:10.515461018 +0000 UTC m=+462.184599512 I0525 10:15:10.549237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:15:10.549681 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:15:10.549673858 +0000 UTC m=+462.218812342 I0525 10:15:10.581383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:03.387730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:19:03.387871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-25 10:19:03.387860934 +0000 UTC m=+695.056999408 I0525 10:19:03.388025 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-25 10:19:03.387981271 +0000 UTC m=+695.057119785 I0525 10:19:03.404794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:03.404866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-25 10:19:03.404859562 +0000 UTC m=+695.073998026 I0525 10:19:03.630050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:03.663206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7w8vz" condition "Approved" to 2026-05-25 10:19:03.663191047 +0000 UTC m=+695.332329521 I0525 10:19:03.692757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7w8vz" condition "Ready" to 2026-05-25 10:19:03.692746062 +0000 UTC m=+695.361884546 I0525 10:19:03.720826 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:19:03.720789392 +0000 UTC m=+695.389927866 I0525 10:19:03.743447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:03.796636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:47.902734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 10:19:47.902800 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-25 10:19:47.902794748 +0000 UTC m=+739.571933212 I0525 10:19:47.902966 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-25 10:19:47.902946655 +0000 UTC m=+739.572085149 I0525 10:19:47.922294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:47.922354 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-25 10:19:47.922347289 +0000 UTC m=+739.591485763 I0525 10:19:48.097132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:48.133893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sb6c6" condition "Approved" to 2026-05-25 10:19:48.133864205 +0000 UTC m=+739.803002709 I0525 10:19:48.161262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sb6c6" condition "Ready" to 2026-05-25 10:19:48.161252648 +0000 UTC m=+739.830391112 I0525 10:19:48.198332 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:19:48.198314765 +0000 UTC m=+739.867453269 I0525 10:19:48.230410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:48.230726 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:19:48.230720362 +0000 UTC m=+739.899858826 I0525 10:19:48.239663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:48.253015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 10:19:48.253304 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 10:19:48.253283836 +0000 UTC m=+739.922422300