I0521 04:46:31.890332 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0521 04:46:31.890666 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0521 04:46:31.890828 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0521 04:46:31.895280 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0521 04:46:31.895871 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0521 04:46:31.895957 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0521 04:46:31.895970 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0521 04:46:31.898758 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0521 04:46:31.915928 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0521 04:46:31.920787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0521 04:46:31.928257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0521 04:46:31.931507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0521 04:46:31.934089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0521 04:46:31.936289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0521 04:46:31.938214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0521 04:46:31.940395 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0521 04:46:31.940433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0521 04:46:31.944660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0521 04:46:31.948793 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0521 04:46:31.951610 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0521 04:46:31.951641 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0521 04:46:31.951652 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0521 04:46:31.951672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0521 04:46:31.954502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0521 04:46:31.956772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0521 04:46:31.958978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0521 04:46:31.960818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0521 04:46:31.962998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0521 04:46:31.970121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0521 04:46:31.973059 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0521 04:46:31.973097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0521 04:46:31.973229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0521 04:46:31.975867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0521 04:46:31.978702 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:31.979334 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:31.980127 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:31.981272 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.010581 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.023211 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.042754 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.058411 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.080747 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:32.081518 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 04:46:45.122828 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-21 04:46:45.122771676 +0000 UTC m=+13.274096210 I0521 04:46:45.917034 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-21 04:46:45.91701814 +0000 UTC m=+14.068342624 I0521 04:46:45.917266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 04:46:45.917355 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 04:46:45.917340851 +0000 UTC m=+14.068665365 E0521 04:46:45.931029 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 04:46:45.931102 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-21 04:46:45.931092689 +0000 UTC m=+14.082417173 E0521 04:46:45.931132 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 04:46:45.931540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:46:45.931669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 04:46:45.931690 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 04:46:45.931685289 +0000 UTC m=+14.083009773 E0521 04:46:45.949235 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0521 04:46:45.949928 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 04:46:45.949976 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 04:46:45.950009 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0521 04:46:45.982410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:46:45.987615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7zq2g" condition "Approved" to 2026-05-21 04:46:45.987605862 +0000 UTC m=+14.138930346 I0521 04:46:45.999567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7zq2g" condition "Ready" to 2026-05-21 04:46:45.999556488 +0000 UTC m=+14.150880962 I0521 04:46:46.040031 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 04:46:46.040009889 +0000 UTC m=+14.191334373 I0521 04:46:46.056423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:46:46.056906 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 04:46:46.056896556 +0000 UTC m=+14.208221030 I0521 04:46:46.077848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:46:50.951716 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 04:46:50.951702183 +0000 UTC m=+19.103026697 I0521 04:47:31.753677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 04:47:31.753775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-21 04:47:31.747810242 +0000 UTC m=+59.899134746 I0521 04:47:31.753849 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-21 04:47:31.753804473 +0000 UTC m=+59.905128957 I0521 04:47:31.869805 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-21 04:47:31.869777252 +0000 UTC m=+60.021101766 I0521 04:47:31.875060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:47:31.875203 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-21 04:47:31.875192022 +0000 UTC m=+60.026516526 I0521 04:47:32.069506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:47:32.288532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cgwh2" condition "Approved" to 2026-05-21 04:47:32.288516285 +0000 UTC m=+60.439840799 I0521 04:47:32.377675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cgwh2" condition "Ready" to 2026-05-21 04:47:32.377653934 +0000 UTC m=+60.528978428 I0521 04:47:32.468667 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 04:47:32.468625453 +0000 UTC m=+60.619949957 I0521 04:47:32.615907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 04:47:32.616474 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 04:47:32.616464043 +0000 UTC m=+60.767788527 I0521 04:47:32.660400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" E0521 04:50:42.191112 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0521 05:04:04.942315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-60.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:04:04.942273 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready" to 2026-05-21 05:04:04.942210256 +0000 UTC m=+1053.093534770 I0521 05:04:04.942372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Issuing" to 2026-05-21 05:04:04.942361991 +0000 UTC m=+1053.093686485 I0521 05:04:05.187403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:04:05.187687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready" to 2026-05-21 05:04:05.187652607 +0000 UTC m=+1053.338977121 I0521 05:04:05.646591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:04:05.835680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-qsgpb" condition "Approved" to 2026-05-21 05:04:05.835664794 +0000 UTC m=+1053.986989298 I0521 05:04:06.023558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-qsgpb" condition "Ready" to 2026-05-21 05:04:06.023544207 +0000 UTC m=+1054.174868691 I0521 05:04:06.611617 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:04:06.611599525 +0000 UTC m=+1054.762924009 I0521 05:04:06.938776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:04:06.939311 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:04:06.939297891 +0000 UTC m=+1055.090622395 I0521 05:04:09.297939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:05:34.677349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 05:05:34.677301177 +0000 UTC m=+1142.828625671 I0521 05:05:34.677411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:05:34.677734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-21 05:05:34.677723722 +0000 UTC m=+1142.829048186 E0521 05:05:35.282992 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 05:05:35.284017 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-21 05:05:35.283990795 +0000 UTC m=+1143.435315279 E0521 05:05:35.284155 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 05:05:35.288219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:05:35.288703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:05:35.288750 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-21 05:05:35.288738202 +0000 UTC m=+1143.440062716 E0521 05:05:35.377910 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0521 05:05:35.378331 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 05:05:35.378566 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 05:05:35.378788 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0521 05:05:35.724667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:05:35.725536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-24kdl" condition "Approved" to 2026-05-21 05:05:35.725527225 +0000 UTC m=+1143.876851709 I0521 05:05:35.792669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-24kdl" condition "Ready" to 2026-05-21 05:05:35.792655928 +0000 UTC m=+1143.943980412 I0521 05:05:35.993384 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:05:35.993363612 +0000 UTC m=+1144.144688126 I0521 05:05:36.200822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:05:40.379374 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:05:40.379357115 +0000 UTC m=+1148.530681599 I0521 05:06:50.572681 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-21 05:06:50.572606169 +0000 UTC m=+1218.723930653 I0521 05:06:50.573293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:06:50.573347 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-21 05:06:50.573335985 +0000 UTC m=+1218.724660469 I0521 05:06:50.573596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:06:50.580613 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 05:06:50.580479562 +0000 UTC m=+1218.731804046 I0521 05:06:50.574058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:06:50.581246 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-21 05:06:50.581233879 +0000 UTC m=+1218.732558363 I0521 05:06:50.574123 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 05:06:50.574101412 +0000 UTC m=+1218.725425896 I0521 05:06:50.575787 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-21 05:06:50.573298634 +0000 UTC m=+1218.724623118 I0521 05:06:50.662654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:50.664173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:06:50.665335 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-21 05:06:50.665325698 +0000 UTC m=+1218.816650192 I0521 05:06:50.665241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:50.665832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:06:50.665859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 05:06:50.665850356 +0000 UTC m=+1218.817174850 I0521 05:06:50.669326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:50.669413 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 05:06:50.669404554 +0000 UTC m=+1218.820729028 I0521 05:06:50.943305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:51.068477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-77rnc" condition "Approved" to 2026-05-21 05:06:51.068463561 +0000 UTC m=+1219.219788045 I0521 05:06:51.672137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-77rnc" condition "Ready" to 2026-05-21 05:06:51.672110797 +0000 UTC m=+1219.823435271 I0521 05:06:51.702569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:52.019502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2df2j" condition "Approved" to 2026-05-21 05:06:52.019486361 +0000 UTC m=+1220.170810855 I0521 05:06:52.020706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zrz5n" condition "Approved" to 2026-05-21 05:06:52.020698525 +0000 UTC m=+1220.172023009 I0521 05:06:52.214222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2df2j" condition "Ready" to 2026-05-21 05:06:52.214211705 +0000 UTC m=+1220.365536169 I0521 05:06:52.215080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zrz5n" condition "Ready" to 2026-05-21 05:06:52.215063096 +0000 UTC m=+1220.366387570 I0521 05:06:52.231668 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:06:52.231647702 +0000 UTC m=+1220.382972176 I0521 05:06:52.325993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:52.596912 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:06:52.59689075 +0000 UTC m=+1220.748215234 I0521 05:06:52.612427 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:06:52.612414147 +0000 UTC m=+1220.763738631 I0521 05:06:52.645596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:52.669699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:06:52.938265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0521 05:06:52.983405 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-prx8v\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0521 05:07:12.666627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:07:12.666650 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" condition "Ready" to 2026-05-21 05:07:12.666628723 +0000 UTC m=+1240.817953207 I0521 05:07:12.666693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" condition "Issuing" to 2026-05-21 05:07:12.666679595 +0000 UTC m=+1240.818004109 I0521 05:07:12.686557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:07:12.686640 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" condition "Ready" to 2026-05-21 05:07:12.686631525 +0000 UTC m=+1240.837955999 I0521 05:07:12.878839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:07:12.915910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mkzw6-knq6x" condition "Approved" to 2026-05-21 05:07:12.915888904 +0000 UTC m=+1241.067213418 I0521 05:07:12.949163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mkzw6-knq6x" condition "Ready" to 2026-05-21 05:07:12.949152744 +0000 UTC m=+1241.100477218 I0521 05:07:12.979488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:07:12.979470738 +0000 UTC m=+1241.130795212 I0521 05:07:13.005591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:07:13.072074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mkzw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:08:04.717594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:08:04.717811 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-21 05:08:04.717796392 +0000 UTC m=+1292.869120916 I0521 05:08:04.718063 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-21 05:08:04.718055271 +0000 UTC m=+1292.869379765 I0521 05:08:04.960052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:08:04.960312 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-21 05:08:04.960300574 +0000 UTC m=+1293.111625098 I0521 05:08:05.530773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:08:05.693090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-flhjb" condition "Approved" to 2026-05-21 05:08:05.693062534 +0000 UTC m=+1293.844387018 I0521 05:08:06.415350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-flhjb" condition "Ready" to 2026-05-21 05:08:06.415335986 +0000 UTC m=+1294.566660480 I0521 05:08:07.080342 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:08:07.080320773 +0000 UTC m=+1295.231645257 I0521 05:08:07.263687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:08:07.264175 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:08:07.264167962 +0000 UTC m=+1295.415492426 I0521 05:08:07.859910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:11:54.465481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:11:54.465549 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 05:11:54.465544883 +0000 UTC m=+1522.616869357 I0521 05:11:54.465499 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-21 05:11:54.465489601 +0000 UTC m=+1522.616814075 I0521 05:11:54.490755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:11:54.490834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:11:54.490854 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 05:11:54.490846378 +0000 UTC m=+1522.642170862 I0521 05:11:55.014305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7xnkb" condition "Approved" to 2026-05-21 05:11:55.014290622 +0000 UTC m=+1523.165615096 I0521 05:11:55.035230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7xnkb" condition "Ready" to 2026-05-21 05:11:55.035216893 +0000 UTC m=+1523.186541377 I0521 05:11:55.083494 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:11:55.083476275 +0000 UTC m=+1523.234800739 I0521 05:11:55.111697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:11:55.116849 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:11:55.116837331 +0000 UTC m=+1523.268161805 I0521 05:11:55.135808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:11:55.136223 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:11:55.136213014 +0000 UTC m=+1523.287537488 I0521 05:12:40.177025 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-21 05:12:40.176946105 +0000 UTC m=+1568.328270579 I0521 05:12:40.177509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 05:12:40.177537 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-21 05:12:40.177532797 +0000 UTC m=+1568.328857291 I0521 05:12:40.207303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:12:40.207420 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-21 05:12:40.207412575 +0000 UTC m=+1568.358737039 I0521 05:12:40.406117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:12:40.444737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s4pr4" condition "Approved" to 2026-05-21 05:12:40.443861039 +0000 UTC m=+1568.595185533 I0521 05:12:40.470188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s4pr4" condition "Ready" to 2026-05-21 05:12:40.470173854 +0000 UTC m=+1568.621498328 I0521 05:12:40.510930 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 05:12:40.510905359 +0000 UTC m=+1568.662229833 I0521 05:12:40.541885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 05:12:40.613596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"