I0508 02:51:28.019372 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0508 02:51:28.019631 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0508 02:51:28.019848 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0508 02:51:28.024572 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0508 02:51:28.024950 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0508 02:51:28.025018 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0508 02:51:28.025089 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0508 02:51:28.027630 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0508 02:51:28.040610 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0508 02:51:28.046231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0508 02:51:28.049383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0508 02:51:28.053053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0508 02:51:28.055438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0508 02:51:28.057904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0508 02:51:28.060597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0508 02:51:28.063583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0508 02:51:28.065407 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0508 02:51:28.065441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0508 02:51:28.069015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0508 02:51:28.071782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0508 02:51:28.075214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0508 02:51:28.076993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0508 02:51:28.078718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0508 02:51:28.080550 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0508 02:51:28.080588 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0508 02:51:28.080606 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0508 02:51:28.080771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0508 02:51:28.082438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0508 02:51:28.083993 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0508 02:51:28.084180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0508 02:51:28.085808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0508 02:51:28.087576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0508 02:51:28.087654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0508 02:51:28.092322 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.092825 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.093120 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.108578 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.123597 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.140655 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.149280 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.166272 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.199341 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:28.221056 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 02:51:44.536685 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-08 02:51:44.536670083 +0000 UTC m=+16.547686972 I0508 02:51:45.215686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:51:45.215731 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-08 02:51:45.215722432 +0000 UTC m=+17.226739301 I0508 02:51:45.215884 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 02:51:45.215868234 +0000 UTC m=+17.226885133 E0508 02:51:45.229615 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 02:51:45.229741 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-08 02:51:45.229722476 +0000 UTC m=+17.240739345 E0508 02:51:45.229808 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 02:51:45.232697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:51:45.232796 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 02:51:45.232788243 +0000 UTC m=+17.243805112 E0508 02:51:45.243565 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0508 02:51:45.244706 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 02:51:45.244836 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 02:51:45.244870 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0508 02:51:45.245463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:51:45.262531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hjlf9" condition "Approved" to 2026-05-08 02:51:45.262523664 +0000 UTC m=+17.273540533 I0508 02:51:45.274184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hjlf9" condition "Ready" to 2026-05-08 02:51:45.274178184 +0000 UTC m=+17.285195053 I0508 02:51:45.296121 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:51:45.296114968 +0000 UTC m=+17.307131837 I0508 02:51:45.317567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:51:50.244093 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:51:50.244070546 +0000 UTC m=+22.255087445 I0508 02:52:11.343188 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-08 02:52:11.343166608 +0000 UTC m=+43.354183477 I0508 02:52:11.343568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:52:11.343642 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-08 02:52:11.343634437 +0000 UTC m=+43.354651296 I0508 02:52:11.365043 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-08 02:52:11.36503192 +0000 UTC m=+43.376048789 I0508 02:52:11.425979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:52:11.437724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:52:11.437773 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-08 02:52:11.437765471 +0000 UTC m=+43.448782330 I0508 02:52:11.864142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtg9k" condition "Approved" to 2026-05-08 02:52:11.864129931 +0000 UTC m=+43.875146830 I0508 02:52:11.893085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtg9k" condition "Ready" to 2026-05-08 02:52:11.893072688 +0000 UTC m=+43.904089687 I0508 02:52:11.922595 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:52:11.922585265 +0000 UTC m=+43.933602134 I0508 02:52:11.957000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:52:11.957335 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:52:11.957328898 +0000 UTC m=+43.968345777 I0508 02:52:11.961000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:52:11.977169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:56:16.273646 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-05-08 02:56:16.273624986 +0000 UTC m=+288.284641855 I0508 02:56:16.274345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:56:16.274368 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-05-08 02:56:16.274363553 +0000 UTC m=+288.285380432 I0508 02:56:16.291187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:56:16.291245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:56:16.291300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-05-08 02:56:16.291295315 +0000 UTC m=+288.302312174 I0508 02:56:16.400812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4w8v7" condition "Approved" to 2026-05-08 02:56:16.400802939 +0000 UTC m=+288.411819808 I0508 02:56:16.422388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4w8v7" condition "Ready" to 2026-05-08 02:56:16.422364403 +0000 UTC m=+288.433381272 I0508 02:56:16.463529 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:56:16.463512266 +0000 UTC m=+288.474529135 I0508 02:56:16.531606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:56:16.583889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:57:19.969402 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 02:57:19.96927257 +0000 UTC m=+351.980289459 I0508 02:57:19.969566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:57:19.969687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-08 02:57:19.969678289 +0000 UTC m=+351.980695178 I0508 02:57:19.981092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:57:19.981136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:57:19.981176 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-08 02:57:19.981170325 +0000 UTC m=+351.992187194 E0508 02:57:19.981780 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 02:57:19.981819 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-08 02:57:19.981814719 +0000 UTC m=+351.992831588 E0508 02:57:19.981860 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 02:57:19.990959 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0508 02:57:19.991018 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 02:57:19.991088 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 02:57:19.991142 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0508 02:57:20.016311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z2qnr" condition "Approved" to 2026-05-08 02:57:20.016296448 +0000 UTC m=+352.027313337 I0508 02:57:20.031559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z2qnr" condition "Ready" to 2026-05-08 02:57:20.031544398 +0000 UTC m=+352.042561287 I0508 02:57:20.054863 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:57:20.054840868 +0000 UTC m=+352.065857767 I0508 02:57:20.072181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:57:20.107027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:57:24.991449 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:57:24.99143365 +0000 UTC m=+357.002450539 I0508 02:58:03.676862 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-08 02:58:03.676773643 +0000 UTC m=+395.687790512 I0508 02:58:03.678971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:03.679004 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-08 02:58:03.678998172 +0000 UTC m=+395.690015021 I0508 02:58:03.680683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:03.680705 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-08 02:58:03.68069863 +0000 UTC m=+395.691715499 I0508 02:58:03.680987 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-08 02:58:03.680982747 +0000 UTC m=+395.691999626 I0508 02:58:03.695969 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-08 02:58:03.695956613 +0000 UTC m=+395.706973472 I0508 02:58:03.696975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:03.697022 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-08 02:58:03.697013577 +0000 UTC m=+395.708030426 I0508 02:58:03.726191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:03.726745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:03.726774 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-08 02:58:03.726768864 +0000 UTC m=+395.737785713 I0508 02:58:03.727158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:03.727187 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-08 02:58:03.727184204 +0000 UTC m=+395.738201063 I0508 02:58:03.756292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:03.756379 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-08 02:58:03.756371659 +0000 UTC m=+395.767388528 I0508 02:58:04.095435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:04.125255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jb48w" condition "Approved" to 2026-05-08 02:58:04.125245049 +0000 UTC m=+396.136261908 I0508 02:58:04.149989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f247p" condition "Approved" to 2026-05-08 02:58:04.149978324 +0000 UTC m=+396.160995193 I0508 02:58:04.200973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:04.202466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jb48w" condition "Ready" to 2026-05-08 02:58:04.202460792 +0000 UTC m=+396.213477651 I0508 02:58:04.206900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f247p" condition "Ready" to 2026-05-08 02:58:04.206891951 +0000 UTC m=+396.217908800 I0508 02:58:04.267747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-clbn9" condition "Approved" to 2026-05-08 02:58:04.267735038 +0000 UTC m=+396.278751917 I0508 02:58:04.273100 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:04.273093938 +0000 UTC m=+396.284110807 I0508 02:58:04.273115 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:04.273105898 +0000 UTC m=+396.284122757 I0508 02:58:04.294277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-clbn9" condition "Ready" to 2026-05-08 02:58:04.294264453 +0000 UTC m=+396.305281322 I0508 02:58:04.372496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:04.372835 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:04.372827677 +0000 UTC m=+396.383844546 I0508 02:58:04.419340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:04.419725 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:04.419717979 +0000 UTC m=+396.430734848 I0508 02:58:04.923733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:05.030382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:05.078328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:05.124339 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:05.124322446 +0000 UTC m=+397.135339345 I0508 02:58:05.322833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:05.622235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.152144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:11.152310 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Issuing" to 2026-05-08 02:58:11.152301529 +0000 UTC m=+403.163318408 I0508 02:58:11.152261 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Ready" to 2026-05-08 02:58:11.152232827 +0000 UTC m=+403.163249706 I0508 02:58:11.171791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-88hls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.171873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:11.171896 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Issuing" to 2026-05-08 02:58:11.17188983 +0000 UTC m=+403.182906699 I0508 02:58:11.599124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-88hls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.605706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-88hls-7bgf9" condition "Approved" to 2026-05-08 02:58:11.605696425 +0000 UTC m=+403.616713284 I0508 02:58:11.627703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-88hls-7bgf9" condition "Ready" to 2026-05-08 02:58:11.62769295 +0000 UTC m=+403.638709809 I0508 02:58:11.657211 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:11.657196373 +0000 UTC m=+403.668213252 I0508 02:58:11.678572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-88hls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.678902 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:11.67889711 +0000 UTC m=+403.689913959 I0508 02:58:11.683179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-88hls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.690584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-88hls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-88hls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:11.691236 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-88hls-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:11.691229347 +0000 UTC m=+403.702246206 I0508 02:58:23.743302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:23.743352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 02:58:23.743340975 +0000 UTC m=+415.754357874 I0508 02:58:23.743329 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-08 02:58:23.743318064 +0000 UTC m=+415.754334933 I0508 02:58:23.759403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:23.759447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 02:58:23.759472 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 02:58:23.759467237 +0000 UTC m=+415.770484086 I0508 02:58:23.877983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:23.890922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6wtxx" condition "Approved" to 2026-05-08 02:58:23.890907174 +0000 UTC m=+415.901924043 I0508 02:58:23.937074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6wtxx" condition "Ready" to 2026-05-08 02:58:23.937062063 +0000 UTC m=+415.948078932 I0508 02:58:23.980224 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:23.980194373 +0000 UTC m=+415.991211242 I0508 02:58:24.000159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 02:58:24.000538 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 02:58:24.000529411 +0000 UTC m=+416.011546280 I0508 02:58:24.030471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.248774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 03:01:43.248833 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-08 03:01:43.248819006 +0000 UTC m=+615.259835875 I0508 03:01:43.249253 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 03:01:43.249228365 +0000 UTC m=+615.260245234 I0508 03:01:43.268142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.268210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 03:01:43.268200497 +0000 UTC m=+615.279217356 I0508 03:01:43.646953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.689411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kcrpw" condition "Approved" to 2026-05-08 03:01:43.689384417 +0000 UTC m=+615.700401286 I0508 03:01:43.715061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kcrpw" condition "Ready" to 2026-05-08 03:01:43.715042941 +0000 UTC m=+615.726059820 I0508 03:01:43.759048 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 03:01:43.759023881 +0000 UTC m=+615.770040780 I0508 03:01:43.796913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.800808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.801228 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 03:01:43.801216081 +0000 UTC m=+615.812232940 I0508 03:01:43.821978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:01:43.822508 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 03:01:43.822496944 +0000 UTC m=+615.833513803 I0508 03:01:43.831933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:02:35.195001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 03:02:35.195092 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-08 03:02:35.195083242 +0000 UTC m=+667.206100111 I0508 03:02:35.196020 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 03:02:35.196013503 +0000 UTC m=+667.207030362 I0508 03:02:35.217670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:02:35.217942 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 03:02:35.217930132 +0000 UTC m=+667.228947001 I0508 03:02:35.546817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 03:02:35.581969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nh4mt" condition "Approved" to 2026-05-08 03:02:35.58193712 +0000 UTC m=+667.592953989 I0508 03:02:35.600084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nh4mt" condition "Ready" to 2026-05-08 03:02:35.600069823 +0000 UTC m=+667.611086682 I0508 03:02:35.629439 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 03:02:35.629414721 +0000 UTC m=+667.640431590 I0508 03:02:35.651242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"