I0514 00:47:22.011767 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0514 00:47:22.012246 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0514 00:47:22.012561 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0514 00:47:22.020450 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0514 00:47:22.021274 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0514 00:47:22.021369 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0514 00:47:22.021436 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0514 00:47:22.025587 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0514 00:47:22.044334 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0514 00:47:22.048079 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0514 00:47:22.048113 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0514 00:47:22.048125 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0514 00:47:22.048178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0514 00:47:22.050825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0514 00:47:22.053434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0514 00:47:22.055987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0514 00:47:22.062084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0514 00:47:22.064196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0514 00:47:22.065997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0514 00:47:22.068037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0514 00:47:22.070011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0514 00:47:22.071815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0514 00:47:22.073554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0514 00:47:22.073648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0514 00:47:22.077025 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0514 00:47:22.078916 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0514 00:47:22.083709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0514 00:47:22.088008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0514 00:47:22.091544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0514 00:47:22.093724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0514 00:47:22.095581 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0514 00:47:22.095749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0514 00:47:22.098791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0514 00:47:22.101281 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.101498 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.103106 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.127104 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.138794 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.152507 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.171203 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.190060 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.200273 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:22.212336 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 00:47:37.266133 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-14 00:47:37.266102045 +0000 UTC m=+15.292753832 I0514 00:47:38.005369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:47:38.005804 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 00:47:38.005794372 +0000 UTC m=+16.032446149 I0514 00:47:38.006464 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 00:47:38.0054661 +0000 UTC m=+16.032117887 E0514 00:47:38.022485 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 00:47:38.022581 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-14 00:47:38.022570479 +0000 UTC m=+16.049222236 E0514 00:47:38.022819 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 00:47:38.025707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:47:38.025981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:47:38.026009 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 00:47:38.026001019 +0000 UTC m=+16.052652776 E0514 00:47:38.037476 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0514 00:47:38.037700 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 00:47:38.037817 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 00:47:38.038262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0514 00:47:38.076241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bc87" condition "Approved" to 2026-05-14 00:47:38.07622463 +0000 UTC m=+16.102876387 I0514 00:47:38.098483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bc87" condition "Ready" to 2026-05-14 00:47:38.098473439 +0000 UTC m=+16.125125186 I0514 00:47:38.130108 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:47:38.130091807 +0000 UTC m=+16.156743564 I0514 00:47:38.147034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:47:38.147421 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:47:38.147413154 +0000 UTC m=+16.174064911 I0514 00:47:38.169441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:47:38.169607 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:47:38.169599282 +0000 UTC m=+16.196251029 I0514 00:47:43.038258 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:47:43.038239298 +0000 UTC m=+21.064891075 I0514 00:48:08.587545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:48:08.587588 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 00:48:08.587580281 +0000 UTC m=+46.614232028 I0514 00:48:08.587754 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 00:48:08.587738495 +0000 UTC m=+46.614390252 I0514 00:48:08.598251 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-14 00:48:08.598240064 +0000 UTC m=+46.624891811 I0514 00:48:08.618579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:48:08.618660 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 00:48:08.618653414 +0000 UTC m=+46.645305161 I0514 00:48:08.687935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:48:08.722399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v8l2p" condition "Approved" to 2026-05-14 00:48:08.722386822 +0000 UTC m=+46.749038579 I0514 00:48:08.753530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v8l2p" condition "Ready" to 2026-05-14 00:48:08.753514297 +0000 UTC m=+46.780166074 I0514 00:48:08.778915 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:48:08.778905089 +0000 UTC m=+46.805556846 I0514 00:48:08.802476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:48:08.802761 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:48:08.802755637 +0000 UTC m=+46.829407384 I0514 00:48:08.822821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:39.985968 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-05-14 00:52:39.98591939 +0000 UTC m=+318.012571167 I0514 00:52:39.986105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-3.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:52:39.986136 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Issuing" to 2026-05-14 00:52:39.986128475 +0000 UTC m=+318.012780232 I0514 00:52:40.003598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:40.003886 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-05-14 00:52:40.003871829 +0000 UTC m=+318.030523586 I0514 00:52:40.266533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:40.298199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-wmgbn" condition "Approved" to 2026-05-14 00:52:40.298179475 +0000 UTC m=+318.324831232 I0514 00:52:40.336545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-wmgbn" condition "Ready" to 2026-05-14 00:52:40.336527841 +0000 UTC m=+318.363179628 I0514 00:52:40.373012 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:52:40.372997694 +0000 UTC m=+318.399649481 I0514 00:52:40.398156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:40.398442 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:52:40.398436191 +0000 UTC m=+318.425087948 I0514 00:52:40.413446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:40.421499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:52:40.421955 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:52:40.421945364 +0000 UTC m=+318.448597121 I0514 00:53:45.664121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 00:53:45.664067962 +0000 UTC m=+383.690719749 I0514 00:53:45.664513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:53:45.664580 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 00:53:45.664570414 +0000 UTC m=+383.691222211 E0514 00:53:45.677472 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 00:53:45.677515 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-14 00:53:45.677508229 +0000 UTC m=+383.704159996 E0514 00:53:45.677663 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 00:53:45.678989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:53:45.679042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:53:45.679085 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 00:53:45.679079278 +0000 UTC m=+383.705731035 E0514 00:53:45.688618 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0514 00:53:45.689264 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 00:53:45.689349 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 00:53:45.689484 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0514 00:53:45.721611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mq5lz" condition "Approved" to 2026-05-14 00:53:45.721592075 +0000 UTC m=+383.748243862 I0514 00:53:45.733268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mq5lz" condition "Ready" to 2026-05-14 00:53:45.733259009 +0000 UTC m=+383.759910766 I0514 00:53:45.792386 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:53:45.792378551 +0000 UTC m=+383.819030298 I0514 00:53:45.816686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:53:45.817021 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:53:45.817011122 +0000 UTC m=+383.843662879 I0514 00:53:45.834729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:53:45.834735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:53:50.689298 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:53:50.68928384 +0000 UTC m=+388.715935617 I0514 00:54:32.505560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:32.505653 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 00:54:32.505600185 +0000 UTC m=+430.532251972 I0514 00:54:32.506412 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-14 00:54:32.506404194 +0000 UTC m=+430.533055951 I0514 00:54:32.534719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:32.534776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 00:54:32.534766701 +0000 UTC m=+430.561418458 I0514 00:54:32.535618 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 00:54:32.53561047 +0000 UTC m=+430.562262227 I0514 00:54:32.538174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:32.538201 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 00:54:32.538195029 +0000 UTC m=+430.564846776 I0514 00:54:32.538535 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 00:54:32.538521847 +0000 UTC m=+430.565173594 I0514 00:54:32.541572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:32.541648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:32.541670 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 00:54:32.541664498 +0000 UTC m=+430.568316245 I0514 00:54:32.570180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:32.570247 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 00:54:32.570240391 +0000 UTC m=+430.596892148 I0514 00:54:32.571110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:32.571541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:32.571583 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 00:54:32.571573971 +0000 UTC m=+430.598225738 I0514 00:54:32.740430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:32.782346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hj44g" condition "Approved" to 2026-05-14 00:54:32.78233009 +0000 UTC m=+430.808981847 I0514 00:54:32.788546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdfr9" condition "Approved" to 2026-05-14 00:54:32.78853236 +0000 UTC m=+430.815184107 I0514 00:54:32.880469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdfr9" condition "Ready" to 2026-05-14 00:54:32.880456698 +0000 UTC m=+430.907108455 I0514 00:54:32.882782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hj44g" condition "Ready" to 2026-05-14 00:54:32.882774811 +0000 UTC m=+430.909426568 I0514 00:54:32.980889 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:32.98088012 +0000 UTC m=+431.007531867 I0514 00:54:32.981313 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:32.98131016 +0000 UTC m=+431.007961907 I0514 00:54:33.068594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:33.069854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:33.132841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:33.250578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fzlsn" condition "Approved" to 2026-05-14 00:54:33.250567406 +0000 UTC m=+431.277219153 I0514 00:54:33.501324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fzlsn" condition "Ready" to 2026-05-14 00:54:33.50130686 +0000 UTC m=+431.527958617 I0514 00:54:33.797779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:33.996757 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:33.99674049 +0000 UTC m=+432.023392247 I0514 00:54:34.095037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:34.095473 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:34.095466398 +0000 UTC m=+432.122118155 I0514 00:54:34.343133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:34.392475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:42.279643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:42.279705 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" condition "Issuing" to 2026-05-14 00:54:42.279676856 +0000 UTC m=+440.306328613 I0514 00:54:42.279810 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" condition "Ready" to 2026-05-14 00:54:42.279788449 +0000 UTC m=+440.306440206 I0514 00:54:42.294854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:42.294953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" condition "Ready" to 2026-05-14 00:54:42.29493721 +0000 UTC m=+440.321588967 I0514 00:54:42.494430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:42.520495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tlpzz" condition "Approved" to 2026-05-14 00:54:42.520481146 +0000 UTC m=+440.547132893 I0514 00:54:42.544353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tlpzz" condition "Ready" to 2026-05-14 00:54:42.544339284 +0000 UTC m=+440.570991041 I0514 00:54:42.577158 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:42.577145234 +0000 UTC m=+440.603796991 I0514 00:54:42.605192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m6wt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.399373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:54:59.399477 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 00:54:59.399433475 +0000 UTC m=+457.426085252 I0514 00:54:59.399478 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 00:54:59.399427205 +0000 UTC m=+457.426078962 I0514 00:54:59.419182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.419267 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 00:54:59.419258214 +0000 UTC m=+457.445909971 I0514 00:54:59.830928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.865638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c7shz" condition "Approved" to 2026-05-14 00:54:59.865627798 +0000 UTC m=+457.892279545 I0514 00:54:59.882526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c7shz" condition "Ready" to 2026-05-14 00:54:59.882515582 +0000 UTC m=+457.909167329 I0514 00:54:59.916176 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:59.916163437 +0000 UTC m=+457.942815194 I0514 00:54:59.941616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.942639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.943111 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:59.943104293 +0000 UTC m=+457.969756050 I0514 00:54:59.961113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:54:59.961466 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:54:59.96145913 +0000 UTC m=+457.988110887 I0514 00:58:20.951186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:58:20.951217 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 00:58:20.951209274 +0000 UTC m=+658.977861031 I0514 00:58:20.951253 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 00:58:20.951236475 +0000 UTC m=+658.977888222 I0514 00:58:20.971179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:58:20.971267 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 00:58:20.971234272 +0000 UTC m=+658.997886029 I0514 00:58:21.282449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:58:21.315230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-27tdg" condition "Approved" to 2026-05-14 00:58:21.315219929 +0000 UTC m=+659.341871686 I0514 00:58:21.335073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-27tdg" condition "Ready" to 2026-05-14 00:58:21.335063463 +0000 UTC m=+659.361715220 I0514 00:58:21.360410 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:58:21.360298076 +0000 UTC m=+659.386949823 I0514 00:58:21.383777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:59:03.147508 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 00:59:03.14748772 +0000 UTC m=+701.174139477 I0514 00:59:03.147806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 00:59:03.147847 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-14 00:59:03.147837027 +0000 UTC m=+701.174488814 I0514 00:59:03.165595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:59:03.165655 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 00:59:03.165647478 +0000 UTC m=+701.192299265 I0514 00:59:03.257169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:59:03.290676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jngmf" condition "Approved" to 2026-05-14 00:59:03.290665722 +0000 UTC m=+701.317317499 I0514 00:59:03.316958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jngmf" condition "Ready" to 2026-05-14 00:59:03.31694663 +0000 UTC m=+701.343598407 I0514 00:59:03.347982 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:59:03.347969161 +0000 UTC m=+701.374620908 I0514 00:59:03.367997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:59:03.375642 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:59:03.375629777 +0000 UTC m=+701.402281524 I0514 00:59:03.389164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 00:59:03.389624 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 00:59:03.389612802 +0000 UTC m=+701.416264579