I0515 05:57:00.514699 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 05:57:00.514974 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 05:57:00.515086 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 05:57:00.523015 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 05:57:00.523495 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 05:57:00.523626 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 05:57:00.523636 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 05:57:00.526151 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 05:57:00.541231 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 05:57:00.546468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 05:57:00.549867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 05:57:00.549636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 05:57:00.550181 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 05:57:00.556279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 05:57:00.560252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 05:57:00.562064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 05:57:00.563901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 05:57:00.565959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 05:57:00.567690 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 05:57:00.567717 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 05:57:00.567797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 05:57:00.571050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 05:57:00.575433 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 05:57:00.575508 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 05:57:00.575516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 05:57:00.578502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 05:57:00.581257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 05:57:00.584105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 05:57:00.586712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 05:57:00.589246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 05:57:00.593105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 05:57:00.596771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 05:57:00.603126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 05:57:00.606559 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.606910 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.609273 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.640265 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.691207 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.760110 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.760822 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.761701 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.762861 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:00.762965 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 05:57:17.002579 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-15 05:57:17.002565246 +0000 UTC m=+16.517983329 I0515 05:57:17.728867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 05:57:17.728919 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 05:57:17.728912113 +0000 UTC m=+17.244330186 I0515 05:57:17.729163 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 05:57:17.729143165 +0000 UTC m=+17.244561268 E0515 05:57:17.746640 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 05:57:17.746703 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-15 05:57:17.746695823 +0000 UTC m=+17.262113896 E0515 05:57:17.746725 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 05:57:17.749606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:17.749660 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 05:57:17.749652824 +0000 UTC m=+17.265070887 E0515 05:57:17.762133 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0515 05:57:17.762563 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 05:57:17.762829 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 05:57:17.763058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0515 05:57:17.771223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:17.771297 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 05:57:17.771290262 +0000 UTC m=+17.286708325 I0515 05:57:17.779428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:17.780078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vl4rk" condition "Approved" to 2026-05-15 05:57:17.780062435 +0000 UTC m=+17.295480538 I0515 05:57:17.791646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vl4rk" condition "Ready" to 2026-05-15 05:57:17.79163744 +0000 UTC m=+17.307055493 I0515 05:57:17.820405 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:17.820389889 +0000 UTC m=+17.335807952 I0515 05:57:17.849605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:17.849953 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:17.849946924 +0000 UTC m=+17.365364997 I0515 05:57:17.869558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:17.870115 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:17.870102871 +0000 UTC m=+17.385520954 I0515 05:57:17.870936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:22.762731 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:22.762714306 +0000 UTC m=+22.278132379 I0515 05:57:48.921379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 05:57:48.921454 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 05:57:48.921441297 +0000 UTC m=+48.436859370 I0515 05:57:48.921179 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 05:57:48.921136251 +0000 UTC m=+48.436554324 I0515 05:57:48.936282 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-15 05:57:48.936269909 +0000 UTC m=+48.451687982 I0515 05:57:48.957257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:48.957341 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 05:57:48.957333761 +0000 UTC m=+48.472751834 I0515 05:57:49.207225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:49.239960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bwbm5" condition "Approved" to 2026-05-15 05:57:49.239947576 +0000 UTC m=+48.755365639 I0515 05:57:49.278106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bwbm5" condition "Ready" to 2026-05-15 05:57:49.278095681 +0000 UTC m=+48.793513754 I0515 05:57:49.313690 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:49.313653368 +0000 UTC m=+48.829071441 I0515 05:57:49.330842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 05:57:49.331059 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 05:57:49.33105245 +0000 UTC m=+48.846470513 I0515 05:57:49.352710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:06:07.699343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-214-82.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:06:07.700011 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-214-82.nip.io-tls" condition "Ready" to 2026-05-15 06:06:07.700004687 +0000 UTC m=+547.215422790 I0515 06:06:07.699967 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-214-82.nip.io-tls" condition "Issuing" to 2026-05-15 06:06:07.69961422 +0000 UTC m=+547.215032323 I0515 06:06:07.728688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-214-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-214-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:06:07.728749 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-214-82.nip.io-tls" condition "Ready" to 2026-05-15 06:06:07.728743148 +0000 UTC m=+547.244161201 I0515 06:06:07.832274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-214-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-214-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:06:07.856181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-214-82.nip.io-tls-rnmh9" condition "Approved" to 2026-05-15 06:06:07.856165518 +0000 UTC m=+547.371583621 I0515 06:06:07.894648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-214-82.nip.io-tls-rnmh9" condition "Ready" to 2026-05-15 06:06:07.894631899 +0000 UTC m=+547.410049992 I0515 06:06:07.922800 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-214-82.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:06:07.922790689 +0000 UTC m=+547.438208762 I0515 06:06:07.944324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-214-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-214-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:07:16.618652 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 06:07:16.618610767 +0000 UTC m=+616.134028850 I0515 06:07:16.619365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:07:16.619388 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 06:07:16.619383062 +0000 UTC m=+616.134801135 E0515 06:07:16.676178 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 06:07:16.676277 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-15 06:07:16.676229085 +0000 UTC m=+616.191647158 E0515 06:07:16.676478 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 06:07:16.678895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:07:16.678995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 06:07:16.678988229 +0000 UTC m=+616.194406292 E0515 06:07:16.690407 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0515 06:07:16.691500 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 06:07:16.691538 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 06:07:16.691901 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0515 06:07:16.715682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:07:16.740897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6xml9" condition "Approved" to 2026-05-15 06:07:16.740874448 +0000 UTC m=+616.256292521 I0515 06:07:16.753769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6xml9" condition "Ready" to 2026-05-15 06:07:16.753758116 +0000 UTC m=+616.269176179 I0515 06:07:16.775558 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:07:16.775539704 +0000 UTC m=+616.290957807 I0515 06:07:16.798593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:07:21.691337 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:07:21.690936598 +0000 UTC m=+621.206354671 I0515 06:08:08.734098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:08.734176 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 06:08:08.7341704 +0000 UTC m=+668.249588463 I0515 06:08:08.734466 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 06:08:08.734461981 +0000 UTC m=+668.249880034 I0515 06:08:08.742265 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 06:08:08.742250465 +0000 UTC m=+668.257668528 I0515 06:08:08.742639 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 06:08:08.74262362 +0000 UTC m=+668.258041683 I0515 06:08:08.742841 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:08.744264 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 06:08:08.744234685 +0000 UTC m=+668.259652748 I0515 06:08:08.749049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:08.749097 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 06:08:08.749088781 +0000 UTC m=+668.264506874 I0515 06:08:08.794101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:08.794190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:08.794217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:08.794338 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 06:08:08.794321594 +0000 UTC m=+668.309739657 I0515 06:08:08.794238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:08.794641 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 06:08:08.794636437 +0000 UTC m=+668.310054500 I0515 06:08:08.795624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:08.795656 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 06:08:08.795649788 +0000 UTC m=+668.311067851 I0515 06:08:09.055913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:09.090267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rst8b" condition "Approved" to 2026-05-15 06:08:09.090256976 +0000 UTC m=+668.605675039 I0515 06:08:09.111814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rst8b" condition "Ready" to 2026-05-15 06:08:09.111803113 +0000 UTC m=+668.627221176 I0515 06:08:09.134784 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:09.134773287 +0000 UTC m=+668.650191350 I0515 06:08:09.162951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:09.207712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:09.216956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgtc9" condition "Approved" to 2026-05-15 06:08:09.216942023 +0000 UTC m=+668.732360116 I0515 06:08:09.232940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bgtc9" condition "Ready" to 2026-05-15 06:08:09.232930446 +0000 UTC m=+668.748348529 I0515 06:08:09.264581 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:09.264569249 +0000 UTC m=+668.779987322 I0515 06:08:09.293608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:09.294243 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:09.294235112 +0000 UTC m=+668.809653195 I0515 06:08:09.412214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:09.620446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8phlh" condition "Approved" to 2026-05-15 06:08:09.620430115 +0000 UTC m=+669.135848198 I0515 06:08:09.677137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8phlh" condition "Ready" to 2026-05-15 06:08:09.677126776 +0000 UTC m=+669.192544849 I0515 06:08:10.173670 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:10.173659457 +0000 UTC m=+669.689077520 I0515 06:08:10.265651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:10.267013 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:10.267002005 +0000 UTC m=+669.782420088 I0515 06:08:10.615573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0515 06:08:10.618311 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-rg7m5\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0515 06:08:25.375575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:25.375533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" condition "Ready" to 2026-05-15 06:08:25.375464474 +0000 UTC m=+684.890882547 I0515 06:08:25.375608 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" condition "Issuing" to 2026-05-15 06:08:25.3756014 +0000 UTC m=+684.891019473 I0515 06:08:25.388321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:25.388407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" condition "Ready" to 2026-05-15 06:08:25.388399959 +0000 UTC m=+684.903818032 I0515 06:08:25.529792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:25.582801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nxbd8-5wmts" condition "Approved" to 2026-05-15 06:08:25.582758079 +0000 UTC m=+685.098176142 I0515 06:08:25.606226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nxbd8-5wmts" condition "Ready" to 2026-05-15 06:08:25.606211383 +0000 UTC m=+685.121629486 I0515 06:08:25.636735 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:25.636724173 +0000 UTC m=+685.152142236 I0515 06:08:25.651950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:45.302935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:45.302976 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 06:08:45.302964118 +0000 UTC m=+704.818382201 I0515 06:08:45.303609 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 06:08:45.303602272 +0000 UTC m=+704.819020345 I0515 06:08:45.324355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:45.324606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:08:45.324662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 06:08:45.324655403 +0000 UTC m=+704.840073476 I0515 06:08:45.525960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:45.534100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xcnx7" condition "Approved" to 2026-05-15 06:08:45.534084661 +0000 UTC m=+705.049502734 I0515 06:08:45.555988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xcnx7" condition "Ready" to 2026-05-15 06:08:45.555974263 +0000 UTC m=+705.071392336 I0515 06:08:45.593038 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:08:45.593025145 +0000 UTC m=+705.108443208 I0515 06:08:45.630150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:08:45.703553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:16.915944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:12:16.915979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 06:12:16.915957316 +0000 UTC m=+916.431375379 I0515 06:12:16.916027 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 06:12:16.916016168 +0000 UTC m=+916.431434261 I0515 06:12:16.938029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:16.938149 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 06:12:16.938135799 +0000 UTC m=+916.453553902 I0515 06:12:17.092073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:17.126382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7dxwz" condition "Approved" to 2026-05-15 06:12:17.126369292 +0000 UTC m=+916.641787365 I0515 06:12:17.150637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7dxwz" condition "Ready" to 2026-05-15 06:12:17.150627411 +0000 UTC m=+916.666045484 I0515 06:12:17.180489 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:12:17.180478206 +0000 UTC m=+916.695896269 I0515 06:12:17.201230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:17.201778 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:12:17.201769174 +0000 UTC m=+916.717187267 I0515 06:12:17.223570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:17.255906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:12:17.256312 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:12:17.256305101 +0000 UTC m=+916.771723174 I0515 06:12:17.285266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:13:02.707576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 06:13:02.707611 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-15 06:13:02.707603442 +0000 UTC m=+962.223021515 I0515 06:13:02.707973 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 06:13:02.707967191 +0000 UTC m=+962.223385274 I0515 06:13:02.729425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:13:02.729504 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 06:13:02.729497259 +0000 UTC m=+962.244915332 I0515 06:13:03.084295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 06:13:03.120802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5t7m6" condition "Approved" to 2026-05-15 06:13:03.120786353 +0000 UTC m=+962.636204426 I0515 06:13:03.138904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5t7m6" condition "Ready" to 2026-05-15 06:13:03.13888635 +0000 UTC m=+962.654304433 I0515 06:13:03.169132 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 06:13:03.169118217 +0000 UTC m=+962.684536280 I0515 06:13:03.190809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"