I0527 05:57:05.244558 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0527 05:57:05.244746 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0527 05:57:05.244873 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0527 05:57:05.250097 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0527 05:57:05.250493 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0527 05:57:05.250550 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0527 05:57:05.250614 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0527 05:57:05.253572 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0527 05:57:05.272066 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0527 05:57:05.272628 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0527 05:57:05.276321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0527 05:57:05.281979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0527 05:57:05.287318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0527 05:57:05.290369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0527 05:57:05.292640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0527 05:57:05.294962 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0527 05:57:05.294995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0527 05:57:05.297516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0527 05:57:05.299854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0527 05:57:05.304209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0527 05:57:05.306888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0527 05:57:05.309381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0527 05:57:05.311809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0527 05:57:05.314104 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0527 05:57:05.316232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0527 05:57:05.316254 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0527 05:57:05.316275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0527 05:57:05.318405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0527 05:57:05.320568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0527 05:57:05.322366 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0527 05:57:05.322400 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0527 05:57:05.323560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0527 05:57:05.328018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0527 05:57:05.330308 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.330504 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.330896 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.345288 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.360255 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.382510 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.392099 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.412551 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.416957 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:05.431874 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 05:57:22.520796 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-27 05:57:22.520757441 +0000 UTC m=+17.312405020 I0527 05:57:23.196183 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 05:57:23.196169825 +0000 UTC m=+17.987817374 I0527 05:57:23.196217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 05:57:23.196496 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 05:57:23.196487308 +0000 UTC m=+17.988134857 E0527 05:57:23.209164 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 05:57:23.209413 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-27 05:57:23.209405011 +0000 UTC m=+18.001052560 E0527 05:57:23.209510 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 05:57:23.209549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:23.209734 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 05:57:23.209714784 +0000 UTC m=+18.001362363 E0527 05:57:23.226417 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0527 05:57:23.226497 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 05:57:23.226531 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 05:57:23.226554 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0527 05:57:23.233046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:23.254402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzzcc" condition "Approved" to 2026-05-27 05:57:23.254391149 +0000 UTC m=+18.046038698 I0527 05:57:23.267144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzzcc" condition "Ready" to 2026-05-27 05:57:23.26713374 +0000 UTC m=+18.058781289 I0527 05:57:23.287601 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 05:57:23.287579176 +0000 UTC m=+18.079226725 I0527 05:57:23.307465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:23.307911 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 05:57:23.307903161 +0000 UTC m=+18.099550710 I0527 05:57:23.320413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:28.227027 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 05:57:28.227009195 +0000 UTC m=+23.018656764 I0527 05:57:52.090580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 05:57:52.090655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 05:57:52.090646459 +0000 UTC m=+46.882294028 I0527 05:57:52.091057 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 05:57:52.091040199 +0000 UTC m=+46.882687768 I0527 05:57:52.119846 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-27 05:57:52.119832436 +0000 UTC m=+46.911479985 I0527 05:57:52.120526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:52.120620 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 05:57:52.120612456 +0000 UTC m=+46.912260005 I0527 05:57:52.254825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:52.285097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jbjbc" condition "Approved" to 2026-05-27 05:57:52.285086525 +0000 UTC m=+47.076734094 I0527 05:57:52.313183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jbjbc" condition "Ready" to 2026-05-27 05:57:52.313172706 +0000 UTC m=+47.104820245 I0527 05:57:52.344916 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 05:57:52.344903424 +0000 UTC m=+47.136550973 I0527 05:57:52.366290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 05:57:52.366952 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 05:57:52.366942655 +0000 UTC m=+47.158590204 I0527 05:57:52.389976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:02:05.454190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:02:05.454228 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Issuing" to 2026-05-27 06:02:05.454219007 +0000 UTC m=+300.245866586 I0527 06:02:05.455297 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Ready" to 2026-05-27 06:02:05.455288548 +0000 UTC m=+300.246936127 I0527 06:02:05.488940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:02:05.489142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:02:05.489210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Issuing" to 2026-05-27 06:02:05.489199314 +0000 UTC m=+300.280846893 I0527 06:02:05.758882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:02:05.784124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-196.nip.io-tls-vmh68" condition "Approved" to 2026-05-27 06:02:05.784098107 +0000 UTC m=+300.575745686 I0527 06:02:05.819721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-196.nip.io-tls-vmh68" condition "Ready" to 2026-05-27 06:02:05.819711457 +0000 UTC m=+300.611359006 I0527 06:02:05.842520 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-196.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:02:05.842506032 +0000 UTC m=+300.634153601 I0527 06:02:05.861308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:09.044961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:09.044959 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 06:03:09.04489728 +0000 UTC m=+363.836544859 I0527 06:03:09.045016 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 06:03:09.045003952 +0000 UTC m=+363.836651531 E0527 06:03:09.056389 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 06:03:09.056423 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-27 06:03:09.056415347 +0000 UTC m=+363.848062886 E0527 06:03:09.056488 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 06:03:09.058548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:09.058672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 06:03:09.058664267 +0000 UTC m=+363.850311816 E0527 06:03:09.067185 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0527 06:03:09.067952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 06:03:09.068000 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 06:03:09.068120 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0527 06:03:09.075019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:09.091665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-msfvh" condition "Approved" to 2026-05-27 06:03:09.09163135 +0000 UTC m=+363.883278919 I0527 06:03:09.103604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-msfvh" condition "Ready" to 2026-05-27 06:03:09.103594475 +0000 UTC m=+363.895242024 I0527 06:03:09.137240 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:09.13723055 +0000 UTC m=+363.928878099 I0527 06:03:09.154738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:09.155018 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:09.155010239 +0000 UTC m=+363.946657788 I0527 06:03:09.168619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:09.168938 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:09.168929449 +0000 UTC m=+363.960576998 I0527 06:03:14.068526 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:14.068512545 +0000 UTC m=+368.860160114 I0527 06:03:52.369502 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 06:03:52.369464672 +0000 UTC m=+407.161112211 I0527 06:03:52.370013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:52.370134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:52.374382 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 06:03:52.374378486 +0000 UTC m=+407.166026045 I0527 06:03:52.370277 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 06:03:52.370269445 +0000 UTC m=+407.161916984 I0527 06:03:52.374336 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 06:03:52.374327505 +0000 UTC m=+407.165975054 I0527 06:03:52.400974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.401411 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 06:03:52.401404908 +0000 UTC m=+407.193052447 I0527 06:03:52.401503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:52.401522 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 06:03:52.4015195 +0000 UTC m=+407.193167039 I0527 06:03:52.401666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:52.401680 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 06:03:52.401677583 +0000 UTC m=+407.193325122 I0527 06:03:52.401835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.401890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:03:52.401909 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 06:03:52.401905836 +0000 UTC m=+407.193553365 I0527 06:03:52.436563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.436724 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 06:03:52.436715782 +0000 UTC m=+407.228363331 I0527 06:03:52.639353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.783721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vvqgg" condition "Approved" to 2026-05-27 06:03:52.783706679 +0000 UTC m=+407.575354248 I0527 06:03:52.836408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vvqgg" condition "Ready" to 2026-05-27 06:03:52.83639879 +0000 UTC m=+407.628046339 I0527 06:03:52.864110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vjf8t" condition "Approved" to 2026-05-27 06:03:52.864099454 +0000 UTC m=+407.655747003 I0527 06:03:52.869231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.875475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vp825" condition "Approved" to 2026-05-27 06:03:52.875464588 +0000 UTC m=+407.667112137 I0527 06:03:52.896335 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:52.896323985 +0000 UTC m=+407.687971534 I0527 06:03:52.899104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vjf8t" condition "Ready" to 2026-05-27 06:03:52.899093493 +0000 UTC m=+407.690741032 I0527 06:03:52.899930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vp825" condition "Ready" to 2026-05-27 06:03:52.899916617 +0000 UTC m=+407.691564196 I0527 06:03:52.921820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:52.922008 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:52.922004065 +0000 UTC m=+407.713651594 I0527 06:03:53.203787 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:53.203773012 +0000 UTC m=+407.995420561 I0527 06:03:53.357636 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:53.357623322 +0000 UTC m=+408.149270871 I0527 06:03:53.401558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:53.504409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:53.603211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:53.603601 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:03:53.603595416 +0000 UTC m=+408.395242965 I0527 06:03:54.004549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:54.053322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:03:54.302058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:00.507346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:04:00.507407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" condition "Issuing" to 2026-05-27 06:04:00.507378066 +0000 UTC m=+415.299025645 I0527 06:04:00.508719 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" condition "Ready" to 2026-05-27 06:04:00.507892074 +0000 UTC m=+415.299539643 I0527 06:04:00.522241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:00.522290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" condition "Ready" to 2026-05-27 06:04:00.522286259 +0000 UTC m=+415.313933798 I0527 06:04:00.766366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:00.817767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dz4jn-b7kjr" condition "Approved" to 2026-05-27 06:04:00.817752775 +0000 UTC m=+415.609400324 I0527 06:04:00.858934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dz4jn-b7kjr" condition "Ready" to 2026-05-27 06:04:00.858920694 +0000 UTC m=+415.650568233 I0527 06:04:00.888417 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:04:00.888407054 +0000 UTC m=+415.680054593 I0527 06:04:00.911911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dz4jn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:13.909386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:04:13.909447 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 06:04:13.909438431 +0000 UTC m=+428.701085980 I0527 06:04:13.909618 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 06:04:13.909602663 +0000 UTC m=+428.701250192 I0527 06:04:13.923834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:13.923898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:04:13.923914 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 06:04:13.923909674 +0000 UTC m=+428.715557223 I0527 06:04:14.129456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:04:14.137503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8t54" condition "Approved" to 2026-05-27 06:04:14.137495066 +0000 UTC m=+428.929142595 I0527 06:04:14.155575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8t54" condition "Ready" to 2026-05-27 06:04:14.155568179 +0000 UTC m=+428.947215728 I0527 06:04:14.191221 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:04:14.191211307 +0000 UTC m=+428.982858846 I0527 06:04:14.215661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:07:24.774899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:07:24.775055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 06:07:24.775047915 +0000 UTC m=+619.566695494 I0527 06:07:24.774973 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 06:07:24.774963842 +0000 UTC m=+619.566611391 I0527 06:07:24.792507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:07:24.792661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:07:24.792747 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 06:07:24.792678168 +0000 UTC m=+619.584325717 I0527 06:07:25.194288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ch87v" condition "Approved" to 2026-05-27 06:07:25.194273945 +0000 UTC m=+619.985921474 I0527 06:07:25.207168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ch87v" condition "Ready" to 2026-05-27 06:07:25.207157162 +0000 UTC m=+619.998804711 I0527 06:07:25.229173 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:07:25.229161945 +0000 UTC m=+620.020809484 I0527 06:07:25.249948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:08:02.217198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:08:02.217227 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 06:08:02.217220743 +0000 UTC m=+657.008868282 I0527 06:08:02.217401 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 06:08:02.217393159 +0000 UTC m=+657.009040708 I0527 06:08:02.232821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 06:08:02.232917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 06:08:02.232944 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 06:08:02.232936063 +0000 UTC m=+657.024583643 I0527 06:08:02.875922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mkjs" condition "Approved" to 2026-05-27 06:08:02.875902506 +0000 UTC m=+657.667550085 I0527 06:08:02.906354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mkjs" condition "Ready" to 2026-05-27 06:08:02.906343713 +0000 UTC m=+657.697991262 I0527 06:08:02.935112 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 06:08:02.935103096 +0000 UTC m=+657.726750635 I0527 06:08:02.957307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"