I0514 14:20:25.220493 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0514 14:20:25.220608 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0514 14:20:25.220669 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0514 14:20:25.226075 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0514 14:20:25.226636 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0514 14:20:25.226742 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0514 14:20:25.226802 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0514 14:20:25.229377 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0514 14:20:25.246602 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0514 14:20:25.252649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0514 14:20:25.255008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0514 14:20:25.261070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0514 14:20:25.263514 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0514 14:20:25.263736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0514 14:20:25.265641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0514 14:20:25.267667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0514 14:20:25.269387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0514 14:20:25.271728 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0514 14:20:25.271761 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0514 14:20:25.274190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0514 14:20:25.277360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0514 14:20:25.281103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0514 14:20:25.283826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0514 14:20:25.283872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0514 14:20:25.286391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0514 14:20:25.288657 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0514 14:20:25.288727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0514 14:20:25.291208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0514 14:20:25.293277 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0514 14:20:25.294956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0514 14:20:25.296675 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0514 14:20:25.296697 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0514 14:20:25.297193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0514 14:20:25.299258 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.300085 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.301868 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.317424 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.336252 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.375616 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.400177 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.418467 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.418892 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:25.456099 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 14:20:39.222537 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-14 14:20:39.222313189 +0000 UTC m=+14.037951512 I0514 14:20:39.991457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:20:39.991561 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 14:20:39.991551837 +0000 UTC m=+14.807190200 I0514 14:20:39.991642 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 14:20:39.991628789 +0000 UTC m=+14.807267212 E0514 14:20:40.007915 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:20:40.008053 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-14 14:20:40.008038233 +0000 UTC m=+14.823676576 E0514 14:20:40.008096 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:20:40.014922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:20:40.015042 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 14:20:40.015031766 +0000 UTC m=+14.830670099 E0514 14:20:40.020448 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0514 14:20:40.020933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:20:40.021067 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:20:40.024138 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0514 14:20:40.035610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:20:40.065201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cbgns" condition "Approved" to 2026-05-14 14:20:40.065095125 +0000 UTC m=+14.880733458 I0514 14:20:40.081866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cbgns" condition "Ready" to 2026-05-14 14:20:40.081850411 +0000 UTC m=+14.897488754 I0514 14:20:40.110994 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:20:40.110979975 +0000 UTC m=+14.926618328 I0514 14:20:40.132960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:20:45.021456 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:20:45.021441162 +0000 UTC m=+19.837079525 I0514 14:21:07.631210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:21:07.631266 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 14:21:07.631260145 +0000 UTC m=+42.446898468 I0514 14:21:07.631606 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 14:21:07.631586017 +0000 UTC m=+42.447224370 I0514 14:21:07.649110 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-14 14:21:07.64910058 +0000 UTC m=+42.464738903 I0514 14:21:07.660978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:21:07.661050 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 14:21:07.661043432 +0000 UTC m=+42.476681755 I0514 14:21:07.994133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:21:08.028646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8m5ph" condition "Approved" to 2026-05-14 14:21:08.028632229 +0000 UTC m=+42.844270562 I0514 14:21:08.073107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8m5ph" condition "Ready" to 2026-05-14 14:21:08.07309727 +0000 UTC m=+42.888735603 I0514 14:21:08.100816 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:21:08.100805661 +0000 UTC m=+42.916444014 I0514 14:21:08.146672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:21:08.233172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:25:18.692204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:25:18.692274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-05-14 14:25:18.692265102 +0000 UTC m=+293.507903465 I0514 14:25:18.692895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-05-14 14:25:18.692886464 +0000 UTC m=+293.508524827 I0514 14:25:18.706671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:25:18.706849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-05-14 14:25:18.706842541 +0000 UTC m=+293.522480874 I0514 14:25:18.895338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:25:18.922295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-7hncm" condition "Approved" to 2026-05-14 14:25:18.922282808 +0000 UTC m=+293.737921141 I0514 14:25:18.953618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-7hncm" condition "Ready" to 2026-05-14 14:25:18.95360732 +0000 UTC m=+293.769245643 I0514 14:25:18.989521 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:25:18.989510862 +0000 UTC m=+293.805149195 I0514 14:25:19.006741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:25:19.044424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.015384 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 14:26:24.015345669 +0000 UTC m=+358.830984022 I0514 14:26:24.016504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:26:24.016547 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 14:26:24.01653672 +0000 UTC m=+358.832175093 E0514 14:26:24.028441 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:26:24.028473 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-14 14:26:24.028466304 +0000 UTC m=+358.844104637 E0514 14:26:24.028630 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 14:26:24.032162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.032210 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 14:26:24.032205081 +0000 UTC m=+358.847843414 E0514 14:26:24.039598 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0514 14:26:24.039684 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:26:24.040033 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 14:26:24.040086 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0514 14:26:24.044317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.063516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sk5zq" condition "Approved" to 2026-05-14 14:26:24.063506544 +0000 UTC m=+358.879144867 I0514 14:26:24.075751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sk5zq" condition "Ready" to 2026-05-14 14:26:24.075738435 +0000 UTC m=+358.891376768 I0514 14:26:24.094985 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:26:24.094973361 +0000 UTC m=+358.910611694 I0514 14:26:24.115518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.115820 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:26:24.115809639 +0000 UTC m=+358.931447982 I0514 14:26:24.120156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.126935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:24.127159 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:26:24.127150777 +0000 UTC m=+358.942789100 I0514 14:26:24.128934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:26:29.040455 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:26:29.040445206 +0000 UTC m=+363.856083539 I0514 14:27:09.945656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:09.945682 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 14:27:09.94567756 +0000 UTC m=+404.761315883 I0514 14:27:09.945870 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-14 14:27:09.945866925 +0000 UTC m=+404.761505248 I0514 14:27:09.946033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:09.946047 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 14:27:09.94604483 +0000 UTC m=+404.761683153 I0514 14:27:09.946164 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 14:27:09.946161654 +0000 UTC m=+404.761799977 I0514 14:27:09.956916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:09.956975 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 14:27:09.956967318 +0000 UTC m=+404.772605651 I0514 14:27:09.957218 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 14:27:09.957203315 +0000 UTC m=+404.772841678 I0514 14:27:09.996468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:09.996574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:09.996598 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 14:27:09.996592291 +0000 UTC m=+404.812230614 I0514 14:27:10.004355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:10.004435 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 14:27:10.004428299 +0000 UTC m=+404.820066632 I0514 14:27:10.008377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:10.008485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:10.008538 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 14:27:10.008532829 +0000 UTC m=+404.824171152 I0514 14:27:10.132565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:10.164582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-l52jd" condition "Approved" to 2026-05-14 14:27:10.164560646 +0000 UTC m=+404.980199009 I0514 14:27:10.177660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdmsm" condition "Approved" to 2026-05-14 14:27:10.177651007 +0000 UTC m=+404.993289320 I0514 14:27:10.192394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-l52jd" condition "Ready" to 2026-05-14 14:27:10.192376346 +0000 UTC m=+405.008014709 I0514 14:27:10.206862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdmsm" condition "Ready" to 2026-05-14 14:27:10.206851278 +0000 UTC m=+405.022489611 I0514 14:27:10.230752 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:10.230742504 +0000 UTC m=+405.046380827 I0514 14:27:10.250146 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:10.250130299 +0000 UTC m=+405.065768622 I0514 14:27:10.261716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:10.289701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:10.575951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lvjtx" condition "Approved" to 2026-05-14 14:27:10.575930134 +0000 UTC m=+405.391568457 E0514 14:27:10.611923 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-7zwm9\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0514 14:27:10.789550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lvjtx" condition "Ready" to 2026-05-14 14:27:10.789488497 +0000 UTC m=+405.605126820 I0514 14:27:11.184057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:11.532628 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:11.532608112 +0000 UTC m=+406.348246465 I0514 14:27:11.580226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:11.676773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:11.677130 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:11.67712274 +0000 UTC m=+406.492761073 I0514 14:27:11.930027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:11.978506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:19.950066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" condition "Ready" to 2026-05-14 14:27:19.950013359 +0000 UTC m=+414.765651682 I0514 14:27:19.950574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:19.950614 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" condition "Issuing" to 2026-05-14 14:27:19.950607047 +0000 UTC m=+414.766245370 I0514 14:27:19.970561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:19.970646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:19.970667 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" condition "Issuing" to 2026-05-14 14:27:19.9706603 +0000 UTC m=+414.786298633 I0514 14:27:20.207608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jvqfp-t2dsq" condition "Approved" to 2026-05-14 14:27:20.207593921 +0000 UTC m=+415.023232254 I0514 14:27:20.227625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jvqfp-t2dsq" condition "Ready" to 2026-05-14 14:27:20.227613774 +0000 UTC m=+415.043252107 I0514 14:27:20.269811 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:20.269792585 +0000 UTC m=+415.085430948 I0514 14:27:20.291922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:20.292459 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:20.292447096 +0000 UTC m=+415.108085459 I0514 14:27:20.310582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jvqfp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:34.574841 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 14:27:34.574826228 +0000 UTC m=+429.390464551 I0514 14:27:34.575225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:27:34.575303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 14:27:34.575299422 +0000 UTC m=+429.390937745 I0514 14:27:34.595478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:34.595555 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 14:27:34.595546975 +0000 UTC m=+429.411185308 I0514 14:27:34.916446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:34.957865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nd6gb" condition "Approved" to 2026-05-14 14:27:34.957846874 +0000 UTC m=+429.773485207 I0514 14:27:34.975505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nd6gb" condition "Ready" to 2026-05-14 14:27:34.975489468 +0000 UTC m=+429.791127791 I0514 14:27:35.014404 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:27:35.014298804 +0000 UTC m=+429.829937137 I0514 14:27:35.044075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:27:35.099460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:58.965421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:58.966426 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 14:30:58.966417258 +0000 UTC m=+633.782055601 I0514 14:30:58.965516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 14:30:58.965500097 +0000 UTC m=+633.781138430 I0514 14:30:58.985344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:58.985423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:30:58.985442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 14:30:58.985436767 +0000 UTC m=+633.801075100 I0514 14:30:59.294214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:59.307123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7j9fg" condition "Approved" to 2026-05-14 14:30:59.307110133 +0000 UTC m=+634.122748486 I0514 14:30:59.325193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7j9fg" condition "Ready" to 2026-05-14 14:30:59.325179909 +0000 UTC m=+634.140818272 I0514 14:30:59.363788 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:59.363775787 +0000 UTC m=+634.179414120 I0514 14:30:59.387691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:59.388087 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:59.388080488 +0000 UTC m=+634.203718821 I0514 14:30:59.397451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:59.406729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:30:59.407116 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:30:59.407109938 +0000 UTC m=+634.222748271 I0514 14:31:44.244483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 14:31:44.244665 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-14 14:31:44.244656802 +0000 UTC m=+679.060295125 I0514 14:31:44.245050 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 14:31:44.245044146 +0000 UTC m=+679.060682479 I0514 14:31:44.266064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:44.266432 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 14:31:44.266426614 +0000 UTC m=+679.082064937 I0514 14:31:44.514569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:44.543026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hk5b9" condition "Approved" to 2026-05-14 14:31:44.543017178 +0000 UTC m=+679.358655521 I0514 14:31:44.562731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hk5b9" condition "Ready" to 2026-05-14 14:31:44.562720657 +0000 UTC m=+679.378359000 I0514 14:31:44.596739 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:44.596728557 +0000 UTC m=+679.412366870 I0514 14:31:44.611607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:44.611845 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 14:31:44.611840545 +0000 UTC m=+679.427478868 I0514 14:31:44.622554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 14:31:44.634520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"