I0506 14:10:42.430404 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0506 14:10:42.430572 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0506 14:10:42.430650 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0506 14:10:42.433669 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0506 14:10:42.434295 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0506 14:10:42.434360 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0506 14:10:42.434499 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0506 14:10:42.436924 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0506 14:10:42.450968 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0506 14:10:42.451191 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0506 14:10:42.456459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0506 14:10:42.459458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0506 14:10:42.461720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0506 14:10:42.464525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0506 14:10:42.467858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0506 14:10:42.472392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0506 14:10:42.475537 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0506 14:10:42.475559 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0506 14:10:42.475568 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0506 14:10:42.475609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0506 14:10:42.478119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0506 14:10:42.480543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0506 14:10:42.483004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0506 14:10:42.485343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0506 14:10:42.487403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0506 14:10:42.490203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0506 14:10:42.494597 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0506 14:10:42.494732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0506 14:10:42.498717 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0506 14:10:42.498840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0506 14:10:42.501132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0506 14:10:42.503661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0506 14:10:42.506519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0506 14:10:42.510582 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.510787 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.510817 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.511298 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.525600 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.546856 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.560629 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.576518 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.597316 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:42.600812 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 14:10:54.991496 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-06 14:10:54.991482717 +0000 UTC m=+12.597494642 I0506 14:10:55.683607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:10:55.683687 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 14:10:55.683671079 +0000 UTC m=+13.289683024 I0506 14:10:55.683917 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 14:10:55.683900518 +0000 UTC m=+13.289912463 E0506 14:10:55.703716 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 14:10:55.704205 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-06 14:10:55.704188926 +0000 UTC m=+13.310200851 E0506 14:10:55.704242 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 14:10:55.705147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.705307 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 14:10:55.705300361 +0000 UTC m=+13.311312286 E0506 14:10:55.718544 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0506 14:10:55.718805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 14:10:55.718894 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 14:10:55.718940 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0506 14:10:55.725581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.725731 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 14:10:55.725699562 +0000 UTC m=+13.331711487 I0506 14:10:55.736456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8hv6d" condition "Approved" to 2026-05-06 14:10:55.73643916 +0000 UTC m=+13.342451085 I0506 14:10:55.741848 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 14:10:55.741828175 +0000 UTC m=+13.347840140 I0506 14:10:55.750225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.756458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8hv6d" condition "Ready" to 2026-05-06 14:10:55.756445056 +0000 UTC m=+13.362456971 I0506 14:10:55.803848 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:10:55.803836032 +0000 UTC m=+13.409847967 I0506 14:10:55.824338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.824623 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:10:55.824616299 +0000 UTC m=+13.430628234 I0506 14:10:55.825211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.836774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:10:55.837029 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:10:55.837018753 +0000 UTC m=+13.443030668 I0506 14:10:55.839539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:11:00.719561 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:11:00.719529326 +0000 UTC m=+18.325541271 I0506 14:11:22.834368 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-06 14:11:22.834332056 +0000 UTC m=+40.440343981 I0506 14:11:22.834911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:11:22.834950 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 14:11:22.834943387 +0000 UTC m=+40.440955312 I0506 14:11:22.847819 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-06 14:11:22.84779182 +0000 UTC m=+40.453803755 I0506 14:11:22.864044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:11:22.864382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:11:22.864437 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 14:11:22.864409063 +0000 UTC m=+40.470420978 I0506 14:11:23.078902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wrdnq" condition "Approved" to 2026-05-06 14:11:23.078878909 +0000 UTC m=+40.684890824 I0506 14:11:23.106113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wrdnq" condition "Ready" to 2026-05-06 14:11:23.106103178 +0000 UTC m=+40.712115103 I0506 14:11:23.141918 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:11:23.141902997 +0000 UTC m=+40.747914922 I0506 14:11:23.169277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:11:23.169723 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:11:23.169716597 +0000 UTC m=+40.775728522 I0506 14:11:23.200432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:15:35.631292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:15:35.632765 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-05-06 14:15:35.632757307 +0000 UTC m=+293.238769232 I0506 14:15:35.631446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-05-06 14:15:35.631411589 +0000 UTC m=+293.237423514 I0506 14:15:35.649528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:15:35.649622 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-05-06 14:15:35.649612343 +0000 UTC m=+293.255624258 I0506 14:15:35.909894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:15:35.951574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-mfffl" condition "Approved" to 2026-05-06 14:15:35.951562073 +0000 UTC m=+293.557573998 I0506 14:15:35.988620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-mfffl" condition "Ready" to 2026-05-06 14:15:35.98860911 +0000 UTC m=+293.594621035 I0506 14:15:36.026912 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:15:36.026903362 +0000 UTC m=+293.632915267 I0506 14:15:36.051725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:16:40.823911 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 14:16:40.823886549 +0000 UTC m=+358.429898474 I0506 14:16:40.824193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:16:40.824543 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 14:16:40.824509119 +0000 UTC m=+358.430521094 E0506 14:16:40.843126 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 14:16:40.843242 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-06 14:16:40.843233629 +0000 UTC m=+358.449245554 E0506 14:16:40.843436 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 14:16:40.847145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:16:40.847237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:16:40.847262 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 14:16:40.847255134 +0000 UTC m=+358.453267059 E0506 14:16:40.864557 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0506 14:16:40.864660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 14:16:40.864708 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 14:16:40.864770 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0506 14:16:40.965530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:16:40.966093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2gztj" condition "Approved" to 2026-05-06 14:16:40.96608275 +0000 UTC m=+358.572094675 I0506 14:16:41.000544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2gztj" condition "Ready" to 2026-05-06 14:16:41.000531158 +0000 UTC m=+358.606543123 I0506 14:16:41.044729 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:16:41.044711196 +0000 UTC m=+358.650723141 I0506 14:16:41.060555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:16:41.518902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:16:45.868244 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:16:45.868229719 +0000 UTC m=+363.474241664 I0506 14:17:25.835284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:25.835438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:25.835495 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 14:17:25.835469052 +0000 UTC m=+403.441480967 I0506 14:17:25.835801 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 14:17:25.835797254 +0000 UTC m=+403.441809159 I0506 14:17:25.836104 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 14:17:25.836100586 +0000 UTC m=+403.442112491 I0506 14:17:25.836330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:25.836346 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 14:17:25.836343566 +0000 UTC m=+403.442355481 I0506 14:17:25.836472 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 14:17:25.836469331 +0000 UTC m=+403.442481246 I0506 14:17:25.845275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-06 14:17:25.845254102 +0000 UTC m=+403.451266057 I0506 14:17:25.885076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:25.885138 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 14:17:25.885132782 +0000 UTC m=+403.491144697 I0506 14:17:25.885826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:25.885867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:25.885883 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-06 14:17:25.885880602 +0000 UTC m=+403.491892517 I0506 14:17:25.886100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:25.886135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:25.886147 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 14:17:25.886144512 +0000 UTC m=+403.492156427 I0506 14:17:26.006226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.014078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jhrdc" condition "Approved" to 2026-05-06 14:17:26.014069068 +0000 UTC m=+403.620080983 I0506 14:17:26.034490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jhrdc" condition "Ready" to 2026-05-06 14:17:26.034478215 +0000 UTC m=+403.640490120 I0506 14:17:26.069451 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:26.06943801 +0000 UTC m=+403.675449935 I0506 14:17:26.112140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.189056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhfrv" condition "Approved" to 2026-05-06 14:17:26.189044938 +0000 UTC m=+403.795056853 I0506 14:17:26.219234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhfrv" condition "Ready" to 2026-05-06 14:17:26.219217287 +0000 UTC m=+403.825229192 I0506 14:17:26.256454 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:26.25643877 +0000 UTC m=+403.862450695 I0506 14:17:26.276147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.276551 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:26.276544005 +0000 UTC m=+403.882555920 I0506 14:17:26.460039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.572455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.608155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:26.830941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bpm9s" condition "Approved" to 2026-05-06 14:17:26.830929795 +0000 UTC m=+404.436941710 I0506 14:17:27.173073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bpm9s" condition "Ready" to 2026-05-06 14:17:27.172913549 +0000 UTC m=+404.778925474 I0506 14:17:27.362524 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:27.362505346 +0000 UTC m=+404.968517301 I0506 14:17:27.458287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:27.458733 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:27.458721226 +0000 UTC m=+405.064733151 I0506 14:17:27.658950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:37.355107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:37.355149 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" condition "Issuing" to 2026-05-06 14:17:37.355139311 +0000 UTC m=+414.961151236 I0506 14:17:37.355105 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" condition "Ready" to 2026-05-06 14:17:37.355079279 +0000 UTC m=+414.961091204 I0506 14:17:37.370537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:37.370795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:37.370827 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" condition "Issuing" to 2026-05-06 14:17:37.370818587 +0000 UTC m=+414.976830512 I0506 14:17:37.548458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5n6n4-9sjv7" condition "Approved" to 2026-05-06 14:17:37.548441261 +0000 UTC m=+415.154453186 I0506 14:17:37.567137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5n6n4-9sjv7" condition "Ready" to 2026-05-06 14:17:37.56712458 +0000 UTC m=+415.173136505 I0506 14:17:37.602400 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:37.60238845 +0000 UTC m=+415.208400375 I0506 14:17:37.629944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5n6n4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:50.443313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:17:50.443347 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-06 14:17:50.443337904 +0000 UTC m=+428.049349849 I0506 14:17:50.443443 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 14:17:50.443427027 +0000 UTC m=+428.049438952 I0506 14:17:50.466182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:50.466253 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 14:17:50.46624716 +0000 UTC m=+428.072259075 I0506 14:17:50.625630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:50.660405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mrv7w" condition "Approved" to 2026-05-06 14:17:50.660394004 +0000 UTC m=+428.266405929 I0506 14:17:50.678155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mrv7w" condition "Ready" to 2026-05-06 14:17:50.678146063 +0000 UTC m=+428.284157978 I0506 14:17:50.703848 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:50.703835557 +0000 UTC m=+428.309847472 I0506 14:17:50.732278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:50.732524 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:50.732517707 +0000 UTC m=+428.338529622 I0506 14:17:50.754773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:17:50.755067 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:17:50.755059949 +0000 UTC m=+428.361071874 I0506 14:21:12.619071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:21:12.619148 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-06 14:21:12.619124533 +0000 UTC m=+630.225136458 I0506 14:21:12.619332 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 14:21:12.619318184 +0000 UTC m=+630.225330099 I0506 14:21:12.635425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:12.635480 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 14:21:12.635474052 +0000 UTC m=+630.241485967 I0506 14:21:12.871422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:12.907066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-98hrm" condition "Approved" to 2026-05-06 14:21:12.907053364 +0000 UTC m=+630.513065289 I0506 14:21:12.931864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-98hrm" condition "Ready" to 2026-05-06 14:21:12.931853682 +0000 UTC m=+630.537865607 I0506 14:21:12.960662 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:21:12.960651187 +0000 UTC m=+630.566663122 I0506 14:21:12.986282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:55.812778 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 14:21:55.812759435 +0000 UTC m=+673.418771360 I0506 14:21:55.812775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 14:21:55.812838 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-06 14:21:55.812832429 +0000 UTC m=+673.418844344 I0506 14:21:55.836452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:55.838567 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 14:21:55.838551949 +0000 UTC m=+673.444563874 I0506 14:21:55.982877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:56.015517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2kfhj" condition "Approved" to 2026-05-06 14:21:56.015508556 +0000 UTC m=+673.621520471 I0506 14:21:56.048039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2kfhj" condition "Ready" to 2026-05-06 14:21:56.048028215 +0000 UTC m=+673.654040150 I0506 14:21:56.082403 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:21:56.082389663 +0000 UTC m=+673.688401598 I0506 14:21:56.111029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:56.111459 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:21:56.111450049 +0000 UTC m=+673.717461994 I0506 14:21:56.129402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:56.131328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 14:21:56.131599 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 14:21:56.131591352 +0000 UTC m=+673.737603277