I0528 21:38:47.142798 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0528 21:38:47.142925 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0528 21:38:47.143005 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0528 21:38:47.147771 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0528 21:38:47.148188 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0528 21:38:47.148229 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0528 21:38:47.148317 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0528 21:38:47.150808 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0528 21:38:47.163531 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0528 21:38:47.166675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0528 21:38:47.169957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0528 21:38:47.174641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0528 21:38:47.179967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0528 21:38:47.184290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0528 21:38:47.187433 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0528 21:38:47.187465 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0528 21:38:47.187476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0528 21:38:47.189570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0528 21:38:47.191217 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0528 21:38:47.191327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0528 21:38:47.193262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0528 21:38:47.195012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0528 21:38:47.200180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0528 21:38:47.202131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0528 21:38:47.203780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0528 21:38:47.203804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0528 21:38:47.203812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0528 21:38:47.203922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0528 21:38:47.205770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0528 21:38:47.207465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0528 21:38:47.209199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0528 21:38:47.210983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0528 21:38:47.214202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0528 21:38:47.216107 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.216124 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.219030 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.219988 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.243940 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.257925 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.276718 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.290244 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.307630 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:47.322568 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 21:38:58.807741 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-28 21:38:58.807731648 +0000 UTC m=+11.694696721 I0528 21:38:59.509014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:38:59.509103 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 21:38:59.509091645 +0000 UTC m=+12.396056758 I0528 21:38:59.509580 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-28 21:38:59.509556384 +0000 UTC m=+12.396521507 E0528 21:38:59.524587 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 21:38:59.524839 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-28 21:38:59.524826671 +0000 UTC m=+12.411791764 E0528 21:38:59.524908 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 21:38:59.532051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:38:59.532100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:38:59.532111 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 21:38:59.532107237 +0000 UTC m=+12.419072320 E0528 21:38:59.535823 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0528 21:38:59.535893 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 21:38:59.535935 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 21:38:59.535962 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0528 21:38:59.569439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:38:59.574990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fdl8x" condition "Approved" to 2026-05-28 21:38:59.574981981 +0000 UTC m=+12.461947064 I0528 21:38:59.592790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fdl8x" condition "Ready" to 2026-05-28 21:38:59.592772505 +0000 UTC m=+12.479737628 I0528 21:38:59.613133 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:38:59.613113277 +0000 UTC m=+12.500078380 I0528 21:38:59.630230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:38:59.630452 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:38:59.630447052 +0000 UTC m=+12.517412135 I0528 21:38:59.654927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:39:04.536754 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:39:04.536736382 +0000 UTC m=+17.423701495 I0528 21:39:28.050440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:39:28.050490 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-28 21:39:28.050478083 +0000 UTC m=+40.937443176 I0528 21:39:28.050786 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 21:39:28.050763357 +0000 UTC m=+40.937728480 I0528 21:39:28.064768 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-28 21:39:28.064754981 +0000 UTC m=+40.951720074 I0528 21:39:28.077656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:39:28.078494 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 21:39:28.078460271 +0000 UTC m=+40.965425484 I0528 21:39:28.288218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:39:28.322592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-whg5z" condition "Approved" to 2026-05-28 21:39:28.322580842 +0000 UTC m=+41.209545925 I0528 21:39:28.365319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-whg5z" condition "Ready" to 2026-05-28 21:39:28.365308916 +0000 UTC m=+41.252274009 I0528 21:39:28.449625 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:39:28.449597464 +0000 UTC m=+41.336562557 I0528 21:39:28.500392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:44:10.020974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-53.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:44:10.021065 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Issuing" to 2026-05-28 21:44:10.021031963 +0000 UTC m=+322.907997056 I0528 21:44:10.021064 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready" to 2026-05-28 21:44:10.021035093 +0000 UTC m=+322.908000216 I0528 21:44:10.038854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:44:10.038924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready" to 2026-05-28 21:44:10.038916565 +0000 UTC m=+322.925881688 I0528 21:44:10.223851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:44:10.305548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-r9n98" condition "Approved" to 2026-05-28 21:44:10.305526513 +0000 UTC m=+323.192491626 I0528 21:44:10.376352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-r9n98" condition "Ready" to 2026-05-28 21:44:10.376266145 +0000 UTC m=+323.263231268 I0528 21:44:10.540589 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:44:10.540575474 +0000 UTC m=+323.427540587 I0528 21:44:10.616875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:44:10.617759 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:44:10.617746973 +0000 UTC m=+323.504712096 I0528 21:44:10.740104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:13.262079 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 21:45:13.26202805 +0000 UTC m=+386.148993163 I0528 21:45:13.262433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:13.262552 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 21:45:13.262541618 +0000 UTC m=+386.149506741 E0528 21:45:13.275682 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 21:45:13.275769 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-28 21:45:13.275760445 +0000 UTC m=+386.162725538 E0528 21:45:13.275817 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 21:45:13.276103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:13.276207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:13.276231 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 21:45:13.276225462 +0000 UTC m=+386.163190555 E0528 21:45:13.289558 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0528 21:45:13.289742 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 21:45:13.289782 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 21:45:13.289847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0528 21:45:13.323648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:13.323611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sp9dg" condition "Approved" to 2026-05-28 21:45:13.323589333 +0000 UTC m=+386.210554446 I0528 21:45:13.340298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sp9dg" condition "Ready" to 2026-05-28 21:45:13.34028553 +0000 UTC m=+386.227250623 I0528 21:45:13.357939 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:13.357927931 +0000 UTC m=+386.244893024 I0528 21:45:13.376121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:13.376352 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:13.376345923 +0000 UTC m=+386.263311016 I0528 21:45:13.389859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:13.390308 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:13.390296351 +0000 UTC m=+386.277261454 I0528 21:45:13.393578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:18.290227 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:18.290215103 +0000 UTC m=+391.177180216 I0528 21:45:58.533451 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 21:45:58.533411789 +0000 UTC m=+431.420376882 I0528 21:45:58.533897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:58.550538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:58.550700 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 21:45:58.550692998 +0000 UTC m=+431.437658081 I0528 21:45:58.555086 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 21:45:58.555070096 +0000 UTC m=+431.442035209 I0528 21:45:58.533926 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 21:45:58.533920547 +0000 UTC m=+431.420885630 I0528 21:45:58.578198 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-28 21:45:58.578186721 +0000 UTC m=+431.465151814 I0528 21:45:58.588111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:58.588138 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 21:45:58.588132202 +0000 UTC m=+431.475097285 I0528 21:45:58.588363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:58.590963 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 21:45:58.5909479 +0000 UTC m=+431.477912973 I0528 21:45:58.605930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:58.606105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:58.606138 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 21:45:58.60613148 +0000 UTC m=+431.493096573 I0528 21:45:58.613746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:58.614034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:45:58.614069 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 21:45:58.614061125 +0000 UTC m=+431.501026248 I0528 21:45:58.695472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:58.722946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sdwbn" condition "Approved" to 2026-05-28 21:45:58.722934063 +0000 UTC m=+431.609899156 I0528 21:45:58.741229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sdwbn" condition "Ready" to 2026-05-28 21:45:58.741216575 +0000 UTC m=+431.628181698 I0528 21:45:58.772461 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:58.772449277 +0000 UTC m=+431.659414370 I0528 21:45:58.798442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:58.863220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4pmk" condition "Approved" to 2026-05-28 21:45:58.863209376 +0000 UTC m=+431.750174469 I0528 21:45:58.888208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4pmk" condition "Ready" to 2026-05-28 21:45:58.888199296 +0000 UTC m=+431.775164379 I0528 21:45:59.016770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:59.031606 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:59.03159327 +0000 UTC m=+431.918558353 I0528 21:45:59.092776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jvq4p" condition "Approved" to 2026-05-28 21:45:59.092764646 +0000 UTC m=+431.979729749 I0528 21:45:59.178974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:59.179277 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:59.179271637 +0000 UTC m=+432.066236720 I0528 21:45:59.334391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jvq4p" condition "Ready" to 2026-05-28 21:45:59.334376713 +0000 UTC m=+432.221341806 I0528 21:45:59.879888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:45:59.926233 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:45:59.92621773 +0000 UTC m=+432.813182823 I0528 21:46:00.077165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:00.077658 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:46:00.077650976 +0000 UTC m=+432.964616069 I0528 21:46:00.388042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:00.388077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:08.445008 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" condition "Ready" to 2026-05-28 21:46:08.444976737 +0000 UTC m=+441.331941850 I0528 21:46:08.445051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:46:08.445074 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" condition "Issuing" to 2026-05-28 21:46:08.445067738 +0000 UTC m=+441.332032831 I0528 21:46:08.465401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j9djt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:08.465499 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" condition "Ready" to 2026-05-28 21:46:08.465490525 +0000 UTC m=+441.352455618 I0528 21:46:08.617857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j9djt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:08.650463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j9djt-5v648" condition "Approved" to 2026-05-28 21:46:08.650450685 +0000 UTC m=+441.537415758 I0528 21:46:08.667544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j9djt-5v648" condition "Ready" to 2026-05-28 21:46:08.667535558 +0000 UTC m=+441.554500641 I0528 21:46:08.698054 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:46:08.698039966 +0000 UTC m=+441.585005059 I0528 21:46:08.734945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j9djt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:08.735166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:46:08.735160279 +0000 UTC m=+441.622125362 I0528 21:46:08.757891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j9djt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j9djt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:22.680102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:46:22.680134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 21:46:22.680121324 +0000 UTC m=+455.567086407 I0528 21:46:22.683484 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 21:46:22.683464687 +0000 UTC m=+455.570429790 I0528 21:46:22.767814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:22.767905 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 21:46:22.767898088 +0000 UTC m=+455.654863181 I0528 21:46:22.893195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:46:22.924483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w5ncv" condition "Approved" to 2026-05-28 21:46:22.924471044 +0000 UTC m=+455.811436127 I0528 21:46:22.941405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w5ncv" condition "Ready" to 2026-05-28 21:46:22.941392941 +0000 UTC m=+455.828358034 I0528 21:46:22.967685 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:46:22.967673528 +0000 UTC m=+455.854638611 I0528 21:46:22.986987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:49:43.038816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 21:49:43.038783271 +0000 UTC m=+655.925748384 I0528 21:49:43.038923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:49:43.039003 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 21:49:43.038990903 +0000 UTC m=+655.925956026 I0528 21:49:43.062181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:49:43.062328 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 21:49:43.062317446 +0000 UTC m=+655.949282539 I0528 21:49:43.354412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:49:43.385442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9lzgs" condition "Approved" to 2026-05-28 21:49:43.385425062 +0000 UTC m=+656.272390155 I0528 21:49:43.405492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9lzgs" condition "Ready" to 2026-05-28 21:49:43.405479398 +0000 UTC m=+656.292444491 I0528 21:49:43.440684 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:49:43.440669615 +0000 UTC m=+656.327634708 I0528 21:49:43.462485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:49:43.515193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:50:24.228633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 21:50:24.228688 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 21:50:24.228656652 +0000 UTC m=+697.115621765 I0528 21:50:24.228709 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 21:50:24.228698553 +0000 UTC m=+697.115663666 I0528 21:50:24.244971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:50:24.245029 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 21:50:24.245022295 +0000 UTC m=+697.131987388 I0528 21:50:24.458487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:50:24.544422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-42998" condition "Approved" to 2026-05-28 21:50:24.54441332 +0000 UTC m=+697.431378393 I0528 21:50:24.577952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-42998" condition "Ready" to 2026-05-28 21:50:24.577941175 +0000 UTC m=+697.464906258 I0528 21:50:24.620760 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:50:24.620737343 +0000 UTC m=+697.507702426 I0528 21:50:24.641859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:50:24.642197 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:50:24.642188733 +0000 UTC m=+697.529153846 I0528 21:50:24.646323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 21:50:24.669212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"