I0505 12:43:03.455189 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 12:43:03.455367 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 12:43:03.455715 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 12:43:03.463429 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 12:43:03.463977 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 12:43:03.464119 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 12:43:03.464262 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 12:43:03.466661 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 12:43:03.482608 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 12:43:03.486520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 12:43:03.489647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 12:43:03.494521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 12:43:03.496734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 12:43:03.498631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 12:43:03.500845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 12:43:03.503470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 12:43:03.505835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 12:43:03.508332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 12:43:03.514131 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 12:43:03.514160 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 12:43:03.514189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 12:43:03.516992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 12:43:03.519413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 12:43:03.521764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 12:43:03.523864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 12:43:03.523882 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 12:43:03.523887 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 12:43:03.523975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 12:43:03.525859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 12:43:03.527591 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 12:43:03.529710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 12:43:03.531331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 12:43:03.532193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 12:43:03.538527 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.539163 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.539156 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.540081 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.552138 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.594534 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.609487 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.620686 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.622472 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:03.637817 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:43:16.686996 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 12:43:16.686974291 +0000 UTC m=+13.270374011 I0505 12:43:17.407841 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 12:43:17.407829517 +0000 UTC m=+13.991229217 I0505 12:43:17.408313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:43:17.408384 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 12:43:17.408376642 +0000 UTC m=+13.991776352 E0505 12:43:17.422615 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:43:17.423092 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 12:43:17.423075177 +0000 UTC m=+14.006474977 E0505 12:43:17.423298 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:43:17.428758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:17.429783 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 12:43:17.429776059 +0000 UTC m=+14.013175759 E0505 12:43:17.437105 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 12:43:17.437234 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:43:17.437329 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:43:17.437406 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 12:43:17.446969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:17.469342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mfhrd" condition "Approved" to 2026-05-05 12:43:17.469332491 +0000 UTC m=+14.052732191 I0505 12:43:17.484139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mfhrd" condition "Ready" to 2026-05-05 12:43:17.484129046 +0000 UTC m=+14.067528736 I0505 12:43:17.508355 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:43:17.508343888 +0000 UTC m=+14.091743588 I0505 12:43:17.523907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:17.524236 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:43:17.524229254 +0000 UTC m=+14.107628944 I0505 12:43:17.547717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:22.437669 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:43:22.437643935 +0000 UTC m=+19.021043655 I0505 12:43:46.684361 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 12:43:46.684326769 +0000 UTC m=+43.267726469 I0505 12:43:46.684471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:43:46.684646 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 12:43:46.684571448 +0000 UTC m=+43.267971168 I0505 12:43:46.707094 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 12:43:46.707083277 +0000 UTC m=+43.290482977 I0505 12:43:46.720556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:46.720818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:43:46.720857 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 12:43:46.720849927 +0000 UTC m=+43.304249617 I0505 12:43:46.879560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:46.888508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4drjs" condition "Approved" to 2026-05-05 12:43:46.888498625 +0000 UTC m=+43.471898355 I0505 12:43:46.911515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4drjs" condition "Ready" to 2026-05-05 12:43:46.911504762 +0000 UTC m=+43.494904462 I0505 12:43:46.938242 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:43:46.938233174 +0000 UTC m=+43.521632854 I0505 12:43:46.958346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:46.959562 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:43:46.95955226 +0000 UTC m=+43.542951960 I0505 12:43:46.983781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:43:46.986137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:48:54.431240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:48:54.431300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-05-05 12:48:54.43129358 +0000 UTC m=+351.014693280 I0505 12:48:54.431733 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-05-05 12:48:54.431718414 +0000 UTC m=+351.015118114 I0505 12:48:54.446884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:48:54.446966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-05-05 12:48:54.446961004 +0000 UTC m=+351.030360694 I0505 12:48:54.637838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:48:54.660477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-f6qzf" condition "Approved" to 2026-05-05 12:48:54.660464314 +0000 UTC m=+351.243864034 I0505 12:48:54.688604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-f6qzf" condition "Ready" to 2026-05-05 12:48:54.688593576 +0000 UTC m=+351.271993276 I0505 12:48:54.709796 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:48:54.709787494 +0000 UTC m=+351.293187194 I0505 12:48:54.729073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:48:54.772203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:00.614515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:00.614557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 12:50:00.614540859 +0000 UTC m=+417.197940589 I0505 12:50:00.614557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 12:50:00.614548299 +0000 UTC m=+417.197948039 E0505 12:50:00.805718 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:50:00.805816 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 12:50:00.805805389 +0000 UTC m=+417.389205119 E0505 12:50:00.805849 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:50:00.810017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:00.810142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:00.810239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 12:50:00.810232923 +0000 UTC m=+417.393632633 E0505 12:50:01.041873 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 12:50:01.042152 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:50:01.042243 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:50:01.042278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 12:50:01.092021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w47fn" condition "Approved" to 2026-05-05 12:50:01.092010636 +0000 UTC m=+417.675410336 I0505 12:50:01.126034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w47fn" condition "Ready" to 2026-05-05 12:50:01.126019638 +0000 UTC m=+417.709419358 I0505 12:50:01.241533 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:01.241516409 +0000 UTC m=+417.824916129 I0505 12:50:01.271628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:01.271985 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:01.271975927 +0000 UTC m=+417.855375657 I0505 12:50:01.303685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:01.303991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:01.304174 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:01.304167086 +0000 UTC m=+417.887566786 I0505 12:50:06.042396 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:06.042381391 +0000 UTC m=+422.625781121 I0505 12:50:47.879078 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 12:50:47.879032846 +0000 UTC m=+464.462432566 I0505 12:50:47.888460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:47.888523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 12:50:47.888517544 +0000 UTC m=+464.471917234 I0505 12:50:47.888629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:47.888643 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 12:50:47.888641187 +0000 UTC m=+464.472040877 I0505 12:50:47.889064 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 12:50:47.889060625 +0000 UTC m=+464.472460315 I0505 12:50:47.893239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:47.893272 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 12:50:47.893264754 +0000 UTC m=+464.476664444 I0505 12:50:47.894120 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 12:50:47.894116111 +0000 UTC m=+464.477515801 I0505 12:50:48.004405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.004479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 12:50:48.00446903 +0000 UTC m=+464.587868720 I0505 12:50:48.008990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.012998 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 12:50:48.012990248 +0000 UTC m=+464.596389938 I0505 12:50:48.029296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.029708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:48.029746 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 12:50:48.029737867 +0000 UTC m=+464.613137597 I0505 12:50:48.156903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.286767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-79cfx" condition "Approved" to 2026-05-05 12:50:48.286757482 +0000 UTC m=+464.870157172 I0505 12:50:48.319184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-79cfx" condition "Ready" to 2026-05-05 12:50:48.319174989 +0000 UTC m=+464.902574689 I0505 12:50:48.350772 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:48.350762219 +0000 UTC m=+464.934161919 I0505 12:50:48.379654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.380049 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:48.380043189 +0000 UTC m=+464.963442879 I0505 12:50:48.416581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.416828 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:48.416822207 +0000 UTC m=+465.000221897 I0505 12:50:48.465651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.497956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w9mjm" condition "Approved" to 2026-05-05 12:50:48.49794516 +0000 UTC m=+465.081344850 I0505 12:50:48.515278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w9mjm" condition "Ready" to 2026-05-05 12:50:48.515270123 +0000 UTC m=+465.098669813 I0505 12:50:48.543770 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:48.543757937 +0000 UTC m=+465.127157627 I0505 12:50:48.573254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.573628 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:48.57362141 +0000 UTC m=+465.157021100 I0505 12:50:48.600729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.750713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:48.808044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n555h" condition "Approved" to 2026-05-05 12:50:48.808032393 +0000 UTC m=+465.391432083 I0505 12:50:48.966161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n555h" condition "Ready" to 2026-05-05 12:50:48.966144394 +0000 UTC m=+465.549544134 I0505 12:50:49.539672 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:49.539513536 +0000 UTC m=+466.122913256 I0505 12:50:49.572224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:56.136978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:50:56.137009 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" condition "Issuing" to 2026-05-05 12:50:56.137002425 +0000 UTC m=+472.720402125 I0505 12:50:56.137184 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" condition "Ready" to 2026-05-05 12:50:56.137168709 +0000 UTC m=+472.720568399 I0505 12:50:56.164365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:56.164436 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" condition "Ready" to 2026-05-05 12:50:56.164429998 +0000 UTC m=+472.747829688 I0505 12:50:56.229202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:56.261718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gw4fz-nv9dk" condition "Approved" to 2026-05-05 12:50:56.261709033 +0000 UTC m=+472.845108723 I0505 12:50:56.289294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gw4fz-nv9dk" condition "Ready" to 2026-05-05 12:50:56.289281869 +0000 UTC m=+472.872681569 I0505 12:50:56.314244 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:56.31423174 +0000 UTC m=+472.897631450 I0505 12:50:56.334475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:50:56.334731 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:50:56.3347252 +0000 UTC m=+472.918124900 I0505 12:50:56.352919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gw4fz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:18.174033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:51:18.174063 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 12:51:18.174055792 +0000 UTC m=+494.757455492 I0505 12:51:18.174352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 12:51:18.174337318 +0000 UTC m=+494.757737008 I0505 12:51:18.196509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:18.196599 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 12:51:18.196591724 +0000 UTC m=+494.779991414 I0505 12:51:18.513487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:18.553021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5qz2h" condition "Approved" to 2026-05-05 12:51:18.553006222 +0000 UTC m=+495.136405922 I0505 12:51:18.577559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5qz2h" condition "Ready" to 2026-05-05 12:51:18.577548554 +0000 UTC m=+495.160948244 I0505 12:51:18.621494 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:51:18.621479925 +0000 UTC m=+495.204879626 I0505 12:51:18.645697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:54:36.720396 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 12:54:36.720360798 +0000 UTC m=+693.303760528 I0505 12:54:36.720436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:54:36.720642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 12:54:36.720632312 +0000 UTC m=+693.304032022 I0505 12:54:36.740560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:54:36.740663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:54:36.740694 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 12:54:36.74068709 +0000 UTC m=+693.324086800 I0505 12:54:36.984487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jvbsd" condition "Approved" to 2026-05-05 12:54:36.984472373 +0000 UTC m=+693.567872063 I0505 12:54:37.006723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jvbsd" condition "Ready" to 2026-05-05 12:54:37.006708085 +0000 UTC m=+693.590107785 I0505 12:54:37.036308 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:54:37.036297945 +0000 UTC m=+693.619697635 I0505 12:54:37.063914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:54:37.064292 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:54:37.064284388 +0000 UTC m=+693.647684088 I0505 12:54:37.086026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:55:22.984588 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 12:55:22.98456314 +0000 UTC m=+739.567962870 I0505 12:55:22.984775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:55:22.984817 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 12:55:22.984806603 +0000 UTC m=+739.568206333 I0505 12:55:23.001881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:55:23.001935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:55:23.001950 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 12:55:23.001945829 +0000 UTC m=+739.585345529 I0505 12:55:23.254296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f9wh4" condition "Approved" to 2026-05-05 12:55:23.254278229 +0000 UTC m=+739.837677919 I0505 12:55:23.273825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f9wh4" condition "Ready" to 2026-05-05 12:55:23.273811753 +0000 UTC m=+739.857211453 I0505 12:55:23.302006 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:55:23.30199065 +0000 UTC m=+739.885390350 I0505 12:55:23.333296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:55:23.333685 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:55:23.333678162 +0000 UTC m=+739.917077852 I0505 12:55:23.357102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:55:23.357890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:55:23.358223 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:55:23.358214094 +0000 UTC m=+739.941613794