I0508 14:30:03.777405 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0508 14:30:03.777602 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0508 14:30:03.777731 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0508 14:30:03.786357 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0508 14:30:03.787048 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0508 14:30:03.787161 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0508 14:30:03.787169 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0508 14:30:03.793022 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0508 14:30:03.807006 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0508 14:30:03.807331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0508 14:30:03.813549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0508 14:30:03.816309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0508 14:30:03.822787 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0508 14:30:03.822813 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0508 14:30:03.822909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0508 14:30:03.824901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0508 14:30:03.827009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0508 14:30:03.828735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0508 14:30:03.830341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0508 14:30:03.830578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0508 14:30:03.832090 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0508 14:30:03.832343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0508 14:30:03.834255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0508 14:30:03.839351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0508 14:30:03.844143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0508 14:30:03.847059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0508 14:30:03.849092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0508 14:30:03.851335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0508 14:30:03.853480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0508 14:30:03.855478 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0508 14:30:03.855539 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0508 14:30:03.857532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0508 14:30:03.859522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0508 14:30:03.865644 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.868344 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.869252 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.887988 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.897887 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.916223 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.951188 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.964837 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:03.992734 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:04.013781 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 14:30:19.747580 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-08 14:30:19.747558691 +0000 UTC m=+16.010428355 I0508 14:30:20.438478 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 14:30:20.43845885 +0000 UTC m=+16.701328534 I0508 14:30:20.438826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:30:20.438887 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-08 14:30:20.438880309 +0000 UTC m=+16.701749983 E0508 14:30:20.497221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 14:30:20.497345 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-08 14:30:20.497333609 +0000 UTC m=+16.760203253 E0508 14:30:20.497386 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 14:30:20.501085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:20.501254 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 14:30:20.501241018 +0000 UTC m=+16.764110682 E0508 14:30:20.566939 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0508 14:30:20.567059 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 14:30:20.567095 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 14:30:20.567132 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0508 14:30:20.740549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:20.925872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v7cj4" condition "Approved" to 2026-05-08 14:30:20.925856015 +0000 UTC m=+17.188725649 I0508 14:30:21.067123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v7cj4" condition "Ready" to 2026-05-08 14:30:21.067106441 +0000 UTC m=+17.329976085 I0508 14:30:21.160703 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:30:21.160660074 +0000 UTC m=+17.423529738 I0508 14:30:21.308365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:21.618588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:25.567875 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:30:25.567859252 +0000 UTC m=+21.830728896 I0508 14:30:50.960356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:30:50.960429 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-08 14:30:50.960422238 +0000 UTC m=+47.223291872 I0508 14:30:50.962126 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-08 14:30:50.962105846 +0000 UTC m=+47.224975480 I0508 14:30:50.989883 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-08 14:30:50.989855644 +0000 UTC m=+47.252725268 I0508 14:30:51.036935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:51.037018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:30:51.037045 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-08 14:30:51.03703806 +0000 UTC m=+47.299907704 I0508 14:30:51.233552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bv9g6" condition "Approved" to 2026-05-08 14:30:51.233537649 +0000 UTC m=+47.496407283 I0508 14:30:51.265019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bv9g6" condition "Ready" to 2026-05-08 14:30:51.265005673 +0000 UTC m=+47.527875317 I0508 14:30:51.305107 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:30:51.305092994 +0000 UTC m=+47.567962638 I0508 14:30:51.330431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:30:51.330699 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:30:51.330693964 +0000 UTC m=+47.593563588 I0508 14:30:51.363992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:35:46.586672 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-05-08 14:35:46.586644272 +0000 UTC m=+342.849513936 I0508 14:35:46.587041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:35:46.587179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-05-08 14:35:46.587113197 +0000 UTC m=+342.849982841 I0508 14:35:46.605810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:35:46.605874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:35:46.605939 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-05-08 14:35:46.605885674 +0000 UTC m=+342.868755318 I0508 14:35:46.750405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-4tgtz" condition "Approved" to 2026-05-08 14:35:46.750388315 +0000 UTC m=+343.013257959 I0508 14:35:46.783054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-4tgtz" condition "Ready" to 2026-05-08 14:35:46.783042416 +0000 UTC m=+343.045912090 I0508 14:35:46.809855 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:35:46.809838215 +0000 UTC m=+343.072707849 I0508 14:35:46.829428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:35:46.829855 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:35:46.829849804 +0000 UTC m=+343.092719448 I0508 14:35:46.852272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.203771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:36:52.204109 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-08 14:36:52.204066783 +0000 UTC m=+408.466936447 I0508 14:36:52.204782 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 14:36:52.204753779 +0000 UTC m=+408.467623443 I0508 14:36:52.222417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.222682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 14:36:52.222669218 +0000 UTC m=+408.485538862 E0508 14:36:52.222977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 14:36:52.223041 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-08 14:36:52.223032201 +0000 UTC m=+408.485901855 E0508 14:36:52.223437 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 14:36:52.237155 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0508 14:36:52.238147 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 14:36:52.238277 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 14:36:52.238486 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0508 14:36:52.245187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.245319 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 14:36:52.245310539 +0000 UTC m=+408.508180183 I0508 14:36:52.249252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.249409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhpv6" condition "Approved" to 2026-05-08 14:36:52.249402795 +0000 UTC m=+408.512272429 I0508 14:36:52.308306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 14:36:52.308297439 +0000 UTC m=+408.571167063 I0508 14:36:52.331290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhpv6" condition "Ready" to 2026-05-08 14:36:52.331281112 +0000 UTC m=+408.594150746 I0508 14:36:52.341978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.362813 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:36:52.362801443 +0000 UTC m=+408.625671087 I0508 14:36:52.379347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:52.428638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:36:57.238207 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:36:57.238192458 +0000 UTC m=+413.501062132 I0508 14:37:39.079440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-08 14:37:39.079430758 +0000 UTC m=+455.342300392 I0508 14:37:39.079646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:37:39.079663 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-08 14:37:39.07965999 +0000 UTC m=+455.342529624 I0508 14:37:39.088761 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-08 14:37:39.088724641 +0000 UTC m=+455.351594265 I0508 14:37:39.089067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:37:39.089109 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-08 14:37:39.089101784 +0000 UTC m=+455.351971418 I0508 14:37:39.092998 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-08 14:37:39.092990438 +0000 UTC m=+455.355860072 I0508 14:37:39.093155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:37:39.102674 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-08 14:37:39.102610104 +0000 UTC m=+455.365479738 I0508 14:37:39.106901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.106958 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-08 14:37:39.106951692 +0000 UTC m=+455.369821326 I0508 14:37:39.128892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.129047 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-08 14:37:39.129041168 +0000 UTC m=+455.391910792 I0508 14:37:39.131091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.131146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:37:39.131161 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-08 14:37:39.131158597 +0000 UTC m=+455.394028231 I0508 14:37:39.344402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.398846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-crwlp" condition "Approved" to 2026-05-08 14:37:39.398835701 +0000 UTC m=+455.661705335 I0508 14:37:39.422656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kh5tt" condition "Approved" to 2026-05-08 14:37:39.422640622 +0000 UTC m=+455.685510276 I0508 14:37:39.447988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-crwlp" condition "Ready" to 2026-05-08 14:37:39.447978107 +0000 UTC m=+455.710847741 I0508 14:37:39.462572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.466345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kh5tt" condition "Ready" to 2026-05-08 14:37:39.466334389 +0000 UTC m=+455.729204023 I0508 14:37:39.504817 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:39.504801011 +0000 UTC m=+455.767670675 I0508 14:37:39.524940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v2wd7" condition "Approved" to 2026-05-08 14:37:39.524930419 +0000 UTC m=+455.787800053 I0508 14:37:39.531362 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:39.531352497 +0000 UTC m=+455.794222131 I0508 14:37:39.533992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.555817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v2wd7" condition "Ready" to 2026-05-08 14:37:39.555798183 +0000 UTC m=+455.818667827 I0508 14:37:39.809199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:39.809486 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:39.809481644 +0000 UTC m=+456.072351278 E0508 14:37:40.055691 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-jq55r\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0508 14:37:40.263724 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:40.263700783 +0000 UTC m=+456.526570447 I0508 14:37:40.516959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:40.517349 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:40.517343373 +0000 UTC m=+456.780213017 I0508 14:37:40.558750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:40.860176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:40.915666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:47.945529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:37:47.945588 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" condition "Issuing" to 2026-05-08 14:37:47.945576379 +0000 UTC m=+464.208446043 I0508 14:37:47.945522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" condition "Ready" to 2026-05-08 14:37:47.945364737 +0000 UTC m=+464.208234391 I0508 14:37:47.967192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:47.967253 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" condition "Ready" to 2026-05-08 14:37:47.967246101 +0000 UTC m=+464.230115745 I0508 14:37:48.059597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:48.093682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zg6z9-c7k2t" condition "Approved" to 2026-05-08 14:37:48.093671472 +0000 UTC m=+464.356541116 I0508 14:37:48.119236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zg6z9-c7k2t" condition "Ready" to 2026-05-08 14:37:48.119208109 +0000 UTC m=+464.382077743 I0508 14:37:48.151230 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:48.151213223 +0000 UTC m=+464.414082877 I0508 14:37:48.181319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:48.181951 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:37:48.181941576 +0000 UTC m=+464.444811220 I0508 14:37:48.199424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:37:48.199713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zg6z9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:38:03.467283 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-08 14:38:03.467267505 +0000 UTC m=+479.730137149 I0508 14:38:03.467743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:38:03.467853 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 14:38:03.46783916 +0000 UTC m=+479.730708824 I0508 14:38:03.481610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:38:03.481782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:38:03.481836 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 14:38:03.481829634 +0000 UTC m=+479.744699278 I0508 14:38:03.975242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:38:03.981980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zwbct" condition "Approved" to 2026-05-08 14:38:03.981966779 +0000 UTC m=+480.244836423 I0508 14:38:03.999995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zwbct" condition "Ready" to 2026-05-08 14:38:03.999987669 +0000 UTC m=+480.262857313 I0508 14:38:04.032454 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:38:04.032097104 +0000 UTC m=+480.294966748 I0508 14:38:04.055688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:41:26.109248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:41:26.109337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-08 14:41:26.109328067 +0000 UTC m=+682.372197731 I0508 14:41:26.109274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 14:41:26.109254946 +0000 UTC m=+682.372124580 I0508 14:41:26.135390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:41:26.135486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 14:41:26.135478238 +0000 UTC m=+682.398347872 I0508 14:41:26.358225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:41:26.388971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kg5hg" condition "Approved" to 2026-05-08 14:41:26.388959194 +0000 UTC m=+682.651828838 I0508 14:41:26.410201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kg5hg" condition "Ready" to 2026-05-08 14:41:26.410187552 +0000 UTC m=+682.673057206 I0508 14:41:26.443560 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:41:26.443542887 +0000 UTC m=+682.706412561 I0508 14:41:26.469716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:41:26.470072 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:41:26.470064463 +0000 UTC m=+682.732934087 I0508 14:41:26.494032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:42:10.393049 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 14:42:10.393033783 +0000 UTC m=+726.655903417 I0508 14:42:10.394155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 14:42:10.394197 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-08 14:42:10.394193933 +0000 UTC m=+726.657063567 I0508 14:42:10.418846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:42:10.418917 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 14:42:10.418909772 +0000 UTC m=+726.681779416 I0508 14:42:10.651360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:42:10.695564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-779b7" condition "Approved" to 2026-05-08 14:42:10.695550183 +0000 UTC m=+726.958419817 I0508 14:42:10.732458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-779b7" condition "Ready" to 2026-05-08 14:42:10.73244186 +0000 UTC m=+726.995311494 I0508 14:42:10.771131 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:42:10.771117413 +0000 UTC m=+727.033987057 I0508 14:42:10.800397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 14:42:10.801052 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 14:42:10.801044667 +0000 UTC m=+727.063914301 I0508 14:42:10.824269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"