I0514 13:15:11.746658 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0514 13:15:11.746869 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0514 13:15:11.746974 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0514 13:15:11.751021 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0514 13:15:11.751399 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0514 13:15:11.751474 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0514 13:15:11.751541 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0514 13:15:11.753896 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0514 13:15:11.771153 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0514 13:15:11.771357 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0514 13:15:11.775976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0514 13:15:11.781513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0514 13:15:11.783273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0514 13:15:11.783300 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0514 13:15:11.783334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0514 13:15:11.785227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0514 13:15:11.787190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0514 13:15:11.789700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0514 13:15:11.792109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0514 13:15:11.796411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0514 13:15:11.800237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0514 13:15:11.802394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0514 13:15:11.804735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0514 13:15:11.807089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0514 13:15:11.809299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0514 13:15:11.809325 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0514 13:15:11.809399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0514 13:15:11.811603 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0514 13:15:11.811765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0514 13:15:11.813265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0514 13:15:11.815100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0514 13:15:11.818543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0514 13:15:11.823199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0514 13:15:11.826049 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.826100 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.826134 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.826445 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.826479 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.826731 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.827165 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.827738 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.827949 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:11.899615 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 13:15:25.532760 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-14 13:15:25.53273905 +0000 UTC m=+13.814370740 I0514 13:15:26.261696 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 13:15:26.261680917 +0000 UTC m=+14.543312627 I0514 13:15:26.261751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:15:26.261829 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 13:15:26.261818043 +0000 UTC m=+14.543449763 E0514 13:15:26.277511 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 13:15:26.277604 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-14 13:15:26.277596352 +0000 UTC m=+14.559228042 E0514 13:15:26.277631 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 13:15:26.280099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:26.280272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:15:26.280391 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 13:15:26.280347307 +0000 UTC m=+14.561978997 E0514 13:15:26.290177 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0514 13:15:26.290315 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 13:15:26.290365 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 13:15:26.290430 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0514 13:15:26.324570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:26.325291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2c4n8" condition "Approved" to 2026-05-14 13:15:26.325281775 +0000 UTC m=+14.606913485 I0514 13:15:26.336689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2c4n8" condition "Ready" to 2026-05-14 13:15:26.336677436 +0000 UTC m=+14.618309136 I0514 13:15:26.356290 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:26.35627985 +0000 UTC m=+14.637911540 I0514 13:15:26.375303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:26.375555 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:26.375547597 +0000 UTC m=+14.657179297 I0514 13:15:26.379215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:26.385573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:26.385856 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:26.385848197 +0000 UTC m=+14.667479887 I0514 13:15:31.290723 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:31.290709462 +0000 UTC m=+19.572341152 I0514 13:15:55.436065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:15:55.437018 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 13:15:55.436989627 +0000 UTC m=+43.718621307 I0514 13:15:55.436291 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 13:15:55.436245133 +0000 UTC m=+43.717876813 I0514 13:15:55.455356 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-14 13:15:55.455344485 +0000 UTC m=+43.736976175 I0514 13:15:55.462127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:55.466400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:15:55.466467 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 13:15:55.466461517 +0000 UTC m=+43.748093197 I0514 13:15:55.910429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:55.920439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q5b4d" condition "Approved" to 2026-05-14 13:15:55.920429778 +0000 UTC m=+44.202061458 I0514 13:15:55.944006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q5b4d" condition "Ready" to 2026-05-14 13:15:55.943996175 +0000 UTC m=+44.225627865 I0514 13:15:56.003026 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:56.003016826 +0000 UTC m=+44.284648496 I0514 13:15:56.045211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:56.045552 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:56.045545795 +0000 UTC m=+44.327177485 I0514 13:15:56.068827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:15:56.069061 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:15:56.069054963 +0000 UTC m=+44.350686653 I0514 13:20:14.744541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-05-14 13:20:14.744530116 +0000 UTC m=+303.026161796 I0514 13:20:14.744572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:20:14.744611 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-05-14 13:20:14.744606378 +0000 UTC m=+303.026238078 I0514 13:20:14.760933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:20:14.760977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:20:14.760989 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-05-14 13:20:14.76098578 +0000 UTC m=+303.042617450 I0514 13:20:15.022689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-z264n" condition "Approved" to 2026-05-14 13:20:15.022671995 +0000 UTC m=+303.304303715 I0514 13:20:15.053794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-z264n" condition "Ready" to 2026-05-14 13:20:15.053783793 +0000 UTC m=+303.335415463 I0514 13:20:15.110391 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:20:15.110378128 +0000 UTC m=+303.392009808 I0514 13:20:15.158130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:20:15.158683 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:20:15.158675329 +0000 UTC m=+303.440307019 I0514 13:20:15.166400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:20:15.167704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:20:15.167988 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:20:15.167982993 +0000 UTC m=+303.449614673 I0514 13:21:20.423699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:21:20.423779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 13:21:20.423742084 +0000 UTC m=+368.705373764 I0514 13:21:20.423993 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 13:21:20.423974309 +0000 UTC m=+368.705606109 I0514 13:21:20.440512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:21:20.440637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:21:20.440671 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 13:21:20.440661782 +0000 UTC m=+368.722293502 E0514 13:21:20.442410 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 13:21:20.442448 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-14 13:21:20.442440824 +0000 UTC m=+368.724072514 E0514 13:21:20.442490 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 13:21:20.461387 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0514 13:21:20.461496 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 13:21:20.461525 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 13:21:20.461564 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0514 13:21:20.488177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:21:20.495599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-frwtx" condition "Approved" to 2026-05-14 13:21:20.495589484 +0000 UTC m=+368.777221174 I0514 13:21:20.507819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-frwtx" condition "Ready" to 2026-05-14 13:21:20.507807111 +0000 UTC m=+368.789438801 I0514 13:21:20.535231 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:21:20.535207196 +0000 UTC m=+368.816838886 I0514 13:21:20.550454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:21:20.550669 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:21:20.55065931 +0000 UTC m=+368.832291000 I0514 13:21:20.567779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:21:25.462912 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:21:25.462891098 +0000 UTC m=+373.744522808 I0514 13:22:05.602298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:05.602361 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 13:22:05.602352431 +0000 UTC m=+413.883984111 I0514 13:22:05.602336 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 13:22:05.6023037 +0000 UTC m=+413.883935390 I0514 13:22:05.603249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:05.603617 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-14 13:22:05.603611336 +0000 UTC m=+413.885243026 I0514 13:22:05.604353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 13:22:05.604347251 +0000 UTC m=+413.885978941 I0514 13:22:05.604571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:05.604623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 13:22:05.604617076 +0000 UTC m=+413.886248756 I0514 13:22:05.604976 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 13:22:05.604968664 +0000 UTC m=+413.886600364 I0514 13:22:05.652340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.652374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.652440 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 13:22:05.652434452 +0000 UTC m=+413.934066132 I0514 13:22:05.655847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:05.655904 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 13:22:05.655877373 +0000 UTC m=+413.937509063 I0514 13:22:05.670329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.670396 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 13:22:05.67039133 +0000 UTC m=+413.952023010 I0514 13:22:05.826492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.855881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.871994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:05.872544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lmbcv" condition "Approved" to 2026-05-14 13:22:05.872533946 +0000 UTC m=+414.154165636 I0514 13:22:05.877187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hmj6t" condition "Approved" to 2026-05-14 13:22:05.877180781 +0000 UTC m=+414.158812461 I0514 13:22:05.911591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lmbcv" condition "Ready" to 2026-05-14 13:22:05.911580603 +0000 UTC m=+414.193212293 I0514 13:22:05.920821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zfjd9" condition "Approved" to 2026-05-14 13:22:05.920811731 +0000 UTC m=+414.202443411 I0514 13:22:05.944998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hmj6t" condition "Ready" to 2026-05-14 13:22:05.944984475 +0000 UTC m=+414.226616155 I0514 13:22:05.967996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zfjd9" condition "Ready" to 2026-05-14 13:22:05.967987525 +0000 UTC m=+414.249619205 I0514 13:22:06.169560 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.16954331 +0000 UTC m=+414.451175010 I0514 13:22:06.267302 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.267286919 +0000 UTC m=+414.548918609 I0514 13:22:06.365331 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.365317215 +0000 UTC m=+414.646948905 I0514 13:22:06.463173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:06.570519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:06.571055 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.571047473 +0000 UTC m=+414.852679153 I0514 13:22:06.662410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:06.662980 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.662963774 +0000 UTC m=+414.944595554 I0514 13:22:06.871053 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:06.87103317 +0000 UTC m=+415.152664850 I0514 13:22:07.151619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:07.168893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:07.215856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:07.510297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:14.527653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" condition "Ready" to 2026-05-14 13:22:14.527635157 +0000 UTC m=+422.809266867 I0514 13:22:14.528476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:14.528507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" condition "Issuing" to 2026-05-14 13:22:14.528500044 +0000 UTC m=+422.810131754 I0514 13:22:14.541099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9md9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:14.541221 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" condition "Ready" to 2026-05-14 13:22:14.541212257 +0000 UTC m=+422.822843957 I0514 13:22:14.826172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9md9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:14.857089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f9md9-pcz4z" condition "Approved" to 2026-05-14 13:22:14.857063257 +0000 UTC m=+423.138694937 I0514 13:22:14.878311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f9md9-pcz4z" condition "Ready" to 2026-05-14 13:22:14.8782981 +0000 UTC m=+423.159929780 I0514 13:22:14.907713 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:14.907697525 +0000 UTC m=+423.189329205 I0514 13:22:14.928151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9md9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:14.928380 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:14.928370017 +0000 UTC m=+423.210001687 I0514 13:22:14.958198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9md9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9md9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:29.373951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:22:29.374001 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 13:22:29.373992815 +0000 UTC m=+437.655624495 I0514 13:22:29.373996 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 13:22:29.373983115 +0000 UTC m=+437.655614795 I0514 13:22:29.391162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:29.391236 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 13:22:29.391230305 +0000 UTC m=+437.672861985 I0514 13:22:29.556205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:29.584253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zdw7x" condition "Approved" to 2026-05-14 13:22:29.584239322 +0000 UTC m=+437.865871012 I0514 13:22:29.601719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zdw7x" condition "Ready" to 2026-05-14 13:22:29.601705857 +0000 UTC m=+437.883337567 I0514 13:22:29.631449 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:29.631435646 +0000 UTC m=+437.913067366 I0514 13:22:29.651574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:22:29.651979 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:22:29.65197125 +0000 UTC m=+437.933602930 I0514 13:22:29.675807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:25:44.783443 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 13:25:44.783428313 +0000 UTC m=+633.065060003 I0514 13:25:44.783713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:25:44.783820 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 13:25:44.783812568 +0000 UTC m=+633.065444298 I0514 13:25:44.799497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 13:25:44.799652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 13:25:44.799689 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 13:25:44.799684016 +0000 UTC m=+633.081315686 I0514 13:25:45.037762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tvpxq" condition "Approved" to 2026-05-14 13:25:45.037748132 +0000 UTC m=+633.319379822 I0514 13:25:45.056203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tvpxq" condition "Ready" to 2026-05-14 13:25:45.056191718 +0000 UTC m=+633.337823408 I0514 13:25:45.084352 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 13:25:45.084341313 +0000 UTC m=+633.365972993 I0514 13:25:45.105967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"