I0506 04:59:27.487400 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0506 04:59:27.487559 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0506 04:59:27.487652 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0506 04:59:27.493569 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0506 04:59:27.493963 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0506 04:59:27.494035 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0506 04:59:27.494137 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0506 04:59:27.496937 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0506 04:59:27.511707 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0506 04:59:27.512027 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0506 04:59:27.515967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0506 04:59:27.518857 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0506 04:59:27.518880 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0506 04:59:27.518935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0506 04:59:27.522847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0506 04:59:27.525167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0506 04:59:27.526985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0506 04:59:27.528754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0506 04:59:27.530370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0506 04:59:27.532343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0506 04:59:27.534053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0506 04:59:27.536693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0506 04:59:27.540970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0506 04:59:27.544799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0506 04:59:27.546722 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0506 04:59:27.546744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0506 04:59:27.546752 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0506 04:59:27.546790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0506 04:59:27.548653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0506 04:59:27.550276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0506 04:59:27.552165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0506 04:59:27.553877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0506 04:59:27.555752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0506 04:59:27.560819 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.561239 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.561358 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.578080 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.592674 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.646380 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.649785 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.655822 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.673961 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:27.676441 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 04:59:40.937119 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-06 04:59:40.937102825 +0000 UTC m=+13.480774721 I0506 04:59:41.724287 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 04:59:41.724272241 +0000 UTC m=+14.267944167 I0506 04:59:41.724589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 04:59:41.724652 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 04:59:41.724640178 +0000 UTC m=+14.268312114 I0506 04:59:41.741439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 04:59:41.741516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 04:59:41.741535 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 04:59:41.741529601 +0000 UTC m=+14.285201497 E0506 04:59:41.742904 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 04:59:41.742981 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-06 04:59:41.742972048 +0000 UTC m=+14.286643954 E0506 04:59:41.743010 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 04:59:41.761053 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0506 04:59:41.761142 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 04:59:41.761174 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 04:59:41.762536 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0506 04:59:41.778511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-glx75" condition "Approved" to 2026-05-06 04:59:41.778500975 +0000 UTC m=+14.322172881 I0506 04:59:41.791548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-glx75" condition "Ready" to 2026-05-06 04:59:41.791527526 +0000 UTC m=+14.335199472 I0506 04:59:41.816676 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 04:59:41.81666036 +0000 UTC m=+14.360332256 I0506 04:59:41.834108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 04:59:46.762133 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 04:59:46.762116026 +0000 UTC m=+19.305787962 I0506 05:00:19.242258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:00:19.242381 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 05:00:19.242351002 +0000 UTC m=+51.786022908 I0506 05:00:19.242616 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-06 05:00:19.242610076 +0000 UTC m=+51.786281982 I0506 05:00:19.256021 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-06 05:00:19.256008574 +0000 UTC m=+51.799680480 I0506 05:00:19.265274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:00:19.265350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:00:19.265383 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 05:00:19.265365886 +0000 UTC m=+51.809037792 I0506 05:00:19.562376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:00:19.572306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-52xqq" condition "Approved" to 2026-05-06 05:00:19.572288642 +0000 UTC m=+52.115960568 I0506 05:00:19.607972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-52xqq" condition "Ready" to 2026-05-06 05:00:19.607963433 +0000 UTC m=+52.151635329 I0506 05:00:19.638539 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:00:19.638523251 +0000 UTC m=+52.182195177 I0506 05:00:19.660669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:00:19.661028 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:00:19.661022077 +0000 UTC m=+52.204693963 I0506 05:00:19.692048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:00:19.692360 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:00:19.692352207 +0000 UTC m=+52.236024113 I0506 05:04:40.248588 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready" to 2026-05-06 05:04:40.248562887 +0000 UTC m=+312.792234793 I0506 05:04:40.249059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:04:40.249096 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Issuing" to 2026-05-06 05:04:40.249087888 +0000 UTC m=+312.792759814 I0506 05:04:40.266488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:04:40.266527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:04:40.266538 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Issuing" to 2026-05-06 05:04:40.266534001 +0000 UTC m=+312.810205897 I0506 05:04:40.469617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-140.nip.io-tls-tq5p6" condition "Approved" to 2026-05-06 05:04:40.469609123 +0000 UTC m=+313.013281009 I0506 05:04:40.501074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-140.nip.io-tls-tq5p6" condition "Ready" to 2026-05-06 05:04:40.501049961 +0000 UTC m=+313.044721867 I0506 05:04:40.537048 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:04:40.537035248 +0000 UTC m=+313.080707144 I0506 05:04:40.557903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:04:40.609893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:05:44.689813 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 05:05:44.689797883 +0000 UTC m=+377.233469809 I0506 05:05:44.689711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:05:44.690742 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 05:05:44.690730227 +0000 UTC m=+377.234402203 E0506 05:05:44.703384 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 05:05:44.703452 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-06 05:05:44.703440973 +0000 UTC m=+377.247112889 E0506 05:05:44.703506 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 05:05:44.704379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:05:44.704450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:05:44.704528 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 05:05:44.704523501 +0000 UTC m=+377.248195407 E0506 05:05:44.712893 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0506 05:05:44.713255 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 05:05:44.713333 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 05:05:44.713457 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0506 05:05:44.745309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kl4gx" condition "Approved" to 2026-05-06 05:05:44.745287518 +0000 UTC m=+377.288959444 I0506 05:05:44.760479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kl4gx" condition "Ready" to 2026-05-06 05:05:44.760463698 +0000 UTC m=+377.304135634 I0506 05:05:44.786349 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:05:44.786323713 +0000 UTC m=+377.329995649 I0506 05:05:44.799457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:05:44.799929 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:05:44.799918462 +0000 UTC m=+377.343590378 I0506 05:05:44.816962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:05:49.713934 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:05:49.713918911 +0000 UTC m=+382.257590847 I0506 05:06:30.703340 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 05:06:30.703295056 +0000 UTC m=+423.246966952 I0506 05:06:30.703701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:30.703761 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 05:06:30.703750407 +0000 UTC m=+423.247422323 I0506 05:06:30.725352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 05:06:30.725343275 +0000 UTC m=+423.269015171 I0506 05:06:30.727676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:30.727696 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-06 05:06:30.727693031 +0000 UTC m=+423.271364927 I0506 05:06:30.727983 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 05:06:30.727980138 +0000 UTC m=+423.271652024 I0506 05:06:30.728477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:30.728493 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 05:06:30.72848984 +0000 UTC m=+423.272161736 I0506 05:06:30.751765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:30.755327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:30.755415 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 05:06:30.755407616 +0000 UTC m=+423.299079512 I0506 05:06:30.770010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:30.770083 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 05:06:30.770078477 +0000 UTC m=+423.313750363 I0506 05:06:30.771741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:30.771779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:30.771796 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 05:06:30.771793258 +0000 UTC m=+423.315465154 I0506 05:06:31.150157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:31.281990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cqw9v" condition "Approved" to 2026-05-06 05:06:31.281980392 +0000 UTC m=+423.825652288 I0506 05:06:31.312776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bbvrb" condition "Approved" to 2026-05-06 05:06:31.312765529 +0000 UTC m=+423.856437425 I0506 05:06:31.328240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cqw9v" condition "Ready" to 2026-05-06 05:06:31.328229619 +0000 UTC m=+423.871901515 I0506 05:06:31.341924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bbvrb" condition "Ready" to 2026-05-06 05:06:31.341913287 +0000 UTC m=+423.885585183 I0506 05:06:31.362192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gn6lh" condition "Approved" to 2026-05-06 05:06:31.362181192 +0000 UTC m=+423.905853088 I0506 05:06:31.382312 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:31.382300134 +0000 UTC m=+423.925972040 I0506 05:06:31.383113 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:31.383108233 +0000 UTC m=+423.926780139 I0506 05:06:31.383385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gn6lh" condition "Ready" to 2026-05-06 05:06:31.383376739 +0000 UTC m=+423.927048635 I0506 05:06:31.421213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:31.421713 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:31.421706417 +0000 UTC m=+423.965378333 I0506 05:06:31.447789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:31.448253 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:31.448246493 +0000 UTC m=+423.991918399 I0506 05:06:31.942916 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:31.942898407 +0000 UTC m=+424.486570343 I0506 05:06:31.994342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:32.094291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:32.272853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:32.272967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0506 05:06:32.274647 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-qz9tg\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0506 05:06:32.342864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:32.785067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:41.148823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:41.148861 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" condition "Issuing" to 2026-05-06 05:06:41.148853292 +0000 UTC m=+433.692525198 I0506 05:06:41.148926 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" condition "Ready" to 2026-05-06 05:06:41.148904574 +0000 UTC m=+433.692576510 I0506 05:06:41.209416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zftkx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:06:41.209488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:06:41.209533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" condition "Issuing" to 2026-05-06 05:06:41.209518777 +0000 UTC m=+433.753190683 I0506 05:06:42.615928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zftkx-dq8pc" condition "Approved" to 2026-05-06 05:06:42.615898909 +0000 UTC m=+435.159570815 I0506 05:06:42.674478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zftkx-dq8pc" condition "Ready" to 2026-05-06 05:06:42.674468922 +0000 UTC m=+435.218140828 I0506 05:06:42.706070 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:06:42.706053909 +0000 UTC m=+435.249725805 I0506 05:06:42.724952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zftkx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zftkx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:07:19.789503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:07:19.789522 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 05:07:19.789506714 +0000 UTC m=+472.333178640 I0506 05:07:19.789563 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-06 05:07:19.789551555 +0000 UTC m=+472.333223481 I0506 05:07:20.053735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:07:20.053864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:07:20.053879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-06 05:07:20.053872167 +0000 UTC m=+472.597544073 I0506 05:07:20.919758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:07:20.923913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hkmk7" condition "Approved" to 2026-05-06 05:07:20.923899873 +0000 UTC m=+473.467571799 I0506 05:07:21.175219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hkmk7" condition "Ready" to 2026-05-06 05:07:21.175193103 +0000 UTC m=+473.718865039 I0506 05:07:22.092406 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:07:22.092386137 +0000 UTC m=+474.636058073 I0506 05:07:22.339627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:07:22.340478 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:07:22.340470618 +0000 UTC m=+474.884142534 I0506 05:07:23.031950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:10:32.536238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:10:32.536303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-06 05:10:32.53629693 +0000 UTC m=+665.079968836 I0506 05:10:32.536678 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 05:10:32.536672828 +0000 UTC m=+665.080344734 I0506 05:10:32.553323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:10:32.553377 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 05:10:32.553370962 +0000 UTC m=+665.097042858 I0506 05:10:32.733460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:10:32.770985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z5fzg" condition "Approved" to 2026-05-06 05:10:32.770974439 +0000 UTC m=+665.314646345 I0506 05:10:32.790909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z5fzg" condition "Ready" to 2026-05-06 05:10:32.790900659 +0000 UTC m=+665.334572555 I0506 05:10:32.831337 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:10:32.831327593 +0000 UTC m=+665.374999479 I0506 05:10:32.855064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:10:32.855358 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:10:32.855353229 +0000 UTC m=+665.399025125 I0506 05:10:32.865136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:10:32.882538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:11:10.733964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 05:11:10.733997 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-06 05:11:10.73399004 +0000 UTC m=+703.277661936 I0506 05:11:10.734562 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 05:11:10.734544261 +0000 UTC m=+703.278216187 I0506 05:11:10.757839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:11:10.761238 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 05:11:10.761222327 +0000 UTC m=+703.304894233 I0506 05:11:11.176412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 05:11:11.207862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6j7xs" condition "Approved" to 2026-05-06 05:11:11.207845338 +0000 UTC m=+703.751517234 I0506 05:11:11.229289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6j7xs" condition "Ready" to 2026-05-06 05:11:11.229279466 +0000 UTC m=+703.772951362 I0506 05:11:11.258668 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 05:11:11.258658787 +0000 UTC m=+703.802330683 I0506 05:11:11.286722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"