I0520 02:15:21.023387 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 02:15:21.023485 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 02:15:21.023706 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 02:15:21.031198 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 02:15:21.031868 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 02:15:21.032209 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 02:15:21.032230 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 02:15:21.035917 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 02:15:21.049035 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 02:15:21.053424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 02:15:21.053479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 02:15:21.057186 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 02:15:21.057252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 02:15:21.062094 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 02:15:21.064067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 02:15:21.066247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 02:15:21.068345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 02:15:21.069933 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 02:15:21.069958 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 02:15:21.069997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 02:15:21.071859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 02:15:21.073485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 02:15:21.075168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 02:15:21.075222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 02:15:21.081024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 02:15:21.084630 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 02:15:21.084796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 02:15:21.087217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 02:15:21.089696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 02:15:21.091984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 02:15:21.094318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 02:15:21.096749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 02:15:21.099330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 02:15:21.101452 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.109439 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.111008 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.111394 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.123468 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.136345 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.152179 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.174806 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.196412 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:21.199586 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 02:15:31.198861 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 02:15:31.198845712 +0000 UTC m=+10.205254857 I0520 02:15:31.894142 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 02:15:31.894128799 +0000 UTC m=+10.900537934 I0520 02:15:31.894197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:15:31.894422 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 02:15:31.894400066 +0000 UTC m=+10.900809201 E0520 02:15:31.908133 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 02:15:31.908246 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 02:15:31.908239909 +0000 UTC m=+10.914649054 E0520 02:15:31.908327 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 02:15:31.909313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:31.909424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:15:31.909466 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 02:15:31.909443185 +0000 UTC m=+10.915852320 E0520 02:15:31.923382 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 02:15:31.923698 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 02:15:31.923782 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 02:15:31.923813 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 02:15:31.954383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:31.962497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jskwf" condition "Approved" to 2026-05-20 02:15:31.962485116 +0000 UTC m=+10.968894281 I0520 02:15:31.979216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jskwf" condition "Ready" to 2026-05-20 02:15:31.979189889 +0000 UTC m=+10.985599034 I0520 02:15:32.007167 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:15:32.007155144 +0000 UTC m=+11.013564289 I0520 02:15:32.027563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:32.027927 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:15:32.027918356 +0000 UTC m=+11.034327561 I0520 02:15:32.042086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:32.045069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:32.045578 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:15:32.045569896 +0000 UTC m=+11.051979031 I0520 02:15:36.923886 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:15:36.923864423 +0000 UTC m=+15.930273588 I0520 02:15:58.594342 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 02:15:58.594330996 +0000 UTC m=+37.600740161 I0520 02:15:58.594303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:15:58.594401 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 02:15:58.594394927 +0000 UTC m=+37.600804082 I0520 02:15:58.607656 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 02:15:58.607640084 +0000 UTC m=+37.614049229 I0520 02:15:58.624725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:58.624816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:15:58.624846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 02:15:58.624841347 +0000 UTC m=+37.631250482 I0520 02:15:58.946308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:58.959331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8mq28" condition "Approved" to 2026-05-20 02:15:58.959321689 +0000 UTC m=+37.965730834 I0520 02:15:58.990223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8mq28" condition "Ready" to 2026-05-20 02:15:58.990212727 +0000 UTC m=+37.996621872 I0520 02:15:59.025276 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:15:59.02525971 +0000 UTC m=+38.031668885 I0520 02:15:59.055492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:15:59.104708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:20:09.373495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-12.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:20:09.373615 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Issuing" to 2026-05-20 02:20:09.3736064 +0000 UTC m=+288.380015545 I0520 02:20:09.374142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready" to 2026-05-20 02:20:09.374135989 +0000 UTC m=+288.380545134 I0520 02:20:09.404100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:20:09.404446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready" to 2026-05-20 02:20:09.404434748 +0000 UTC m=+288.410843913 I0520 02:20:09.529389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:20:09.572704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-tz88r" condition "Approved" to 2026-05-20 02:20:09.572688947 +0000 UTC m=+288.579098132 I0520 02:20:09.623568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-12.nip.io-tls-tz88r" condition "Ready" to 2026-05-20 02:20:09.623554543 +0000 UTC m=+288.629963708 I0520 02:20:09.678180 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-12.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:20:09.678169532 +0000 UTC m=+288.684578677 I0520 02:20:09.716924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:20:09.778579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-12.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-12.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:21:14.507000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:21:14.507078 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 02:21:14.507062788 +0000 UTC m=+353.513471933 I0520 02:21:14.507069 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 02:21:14.507055088 +0000 UTC m=+353.513464263 E0520 02:21:14.519468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 02:21:14.519524 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 02:21:14.519514046 +0000 UTC m=+353.525923221 E0520 02:21:14.519586 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 02:21:14.522400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:21:14.522502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:21:14.522551 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 02:21:14.522543786 +0000 UTC m=+353.528952931 E0520 02:21:14.528487 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 02:21:14.528720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 02:21:14.528779 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 02:21:14.528847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 02:21:14.557354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:21:14.562260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m7wc8" condition "Approved" to 2026-05-20 02:21:14.562244858 +0000 UTC m=+353.568654013 I0520 02:21:14.575523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m7wc8" condition "Ready" to 2026-05-20 02:21:14.575507027 +0000 UTC m=+353.581916172 I0520 02:21:14.596466 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:21:14.596456737 +0000 UTC m=+353.602865882 I0520 02:21:14.613950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:21:14.650418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:21:19.529709 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:21:19.529690763 +0000 UTC m=+358.536099958 I0520 02:22:00.053681 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 02:22:00.053666872 +0000 UTC m=+399.060076017 I0520 02:22:00.054290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:00.054321 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 02:22:00.054314356 +0000 UTC m=+399.060723501 I0520 02:22:00.057809 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 02:22:00.057793545 +0000 UTC m=+399.064202710 I0520 02:22:00.059172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:00.059198 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 02:22:00.059193735 +0000 UTC m=+399.065602870 I0520 02:22:00.069018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:00.069052 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 02:22:00.069046586 +0000 UTC m=+399.075455721 I0520 02:22:00.069341 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 02:22:00.069337492 +0000 UTC m=+399.075746627 I0520 02:22:00.089779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.089857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:00.089877 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 02:22:00.08987176 +0000 UTC m=+399.096280895 I0520 02:22:00.091006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.091053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:00.091074 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 02:22:00.091069506 +0000 UTC m=+399.097478641 I0520 02:22:00.094031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.094133 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 02:22:00.094125695 +0000 UTC m=+399.100534830 I0520 02:22:00.251997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5hjq6" condition "Approved" to 2026-05-20 02:22:00.251982719 +0000 UTC m=+399.258391864 I0520 02:22:00.258720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.270602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5hjq6" condition "Ready" to 2026-05-20 02:22:00.270594644 +0000 UTC m=+399.277003779 I0520 02:22:00.292531 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:00.292525583 +0000 UTC m=+399.298934718 I0520 02:22:00.326982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.337917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.361576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x5fjk" condition "Approved" to 2026-05-20 02:22:00.361565995 +0000 UTC m=+399.367975130 I0520 02:22:00.391493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x5fjk" condition "Ready" to 2026-05-20 02:22:00.391484503 +0000 UTC m=+399.397893638 I0520 02:22:00.453388 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:00.453376114 +0000 UTC m=+399.459785249 I0520 02:22:00.482955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.483172 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:00.483165978 +0000 UTC m=+399.489575113 I0520 02:22:00.738093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:00.850069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:01.044713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:01.091997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rzznx" condition "Approved" to 2026-05-20 02:22:01.091983432 +0000 UTC m=+400.098392587 I0520 02:22:01.461372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rzznx" condition "Ready" to 2026-05-20 02:22:01.46135851 +0000 UTC m=+400.467767655 I0520 02:22:01.636935 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:01.636921116 +0000 UTC m=+400.643330271 I0520 02:22:01.734489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:02.037409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:08.686927 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" condition "Ready" to 2026-05-20 02:22:08.686898065 +0000 UTC m=+407.693307220 I0520 02:22:08.687427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:08.687499 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" condition "Issuing" to 2026-05-20 02:22:08.687489747 +0000 UTC m=+407.693898912 I0520 02:22:08.702248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:08.702324 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" condition "Ready" to 2026-05-20 02:22:08.7023167 +0000 UTC m=+407.708725845 I0520 02:22:08.851184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:08.901886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6ztk5-kvbdc" condition "Approved" to 2026-05-20 02:22:08.901875365 +0000 UTC m=+407.908284520 I0520 02:22:08.984857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6ztk5-kvbdc" condition "Ready" to 2026-05-20 02:22:08.9848426 +0000 UTC m=+407.991251775 I0520 02:22:09.065054 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:09.065041962 +0000 UTC m=+408.071451107 I0520 02:22:09.083190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:09.083540 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:09.083530793 +0000 UTC m=+408.089939928 I0520 02:22:09.097543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:09.102748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ztk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:22.167423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:22.167456 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 02:22:22.167448628 +0000 UTC m=+421.173857773 I0520 02:22:22.167768 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 02:22:22.167762904 +0000 UTC m=+421.174172049 I0520 02:22:22.191797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:22:22.191852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:22:22.191866 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 02:22:22.191861728 +0000 UTC m=+421.198270863 I0520 02:22:22.378590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-76skm" condition "Approved" to 2026-05-20 02:22:22.378580086 +0000 UTC m=+421.384989221 I0520 02:22:22.406678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-76skm" condition "Ready" to 2026-05-20 02:22:22.406666002 +0000 UTC m=+421.413075137 I0520 02:22:22.442615 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:22:22.442603663 +0000 UTC m=+421.449012808 I0520 02:22:22.461949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:25:29.670475 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 02:25:29.670458619 +0000 UTC m=+608.676867764 I0520 02:25:29.674669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:25:29.674697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 02:25:29.674690002 +0000 UTC m=+608.681099137 I0520 02:25:29.708921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:25:29.710084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 02:25:29.710071852 +0000 UTC m=+608.716480987 I0520 02:25:30.053148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:25:30.085618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8q6cr" condition "Approved" to 2026-05-20 02:25:30.085601262 +0000 UTC m=+609.092010427 I0520 02:25:30.100886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8q6cr" condition "Ready" to 2026-05-20 02:25:30.100877612 +0000 UTC m=+609.107286747 I0520 02:25:30.125541 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:25:30.12552781 +0000 UTC m=+609.131936975 I0520 02:25:30.147051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:25:30.147348 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:25:30.147342597 +0000 UTC m=+609.153751732 I0520 02:25:30.165621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:26:08.835522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 02:26:08.835553 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 02:26:08.835546736 +0000 UTC m=+647.841955881 I0520 02:26:08.835919 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 02:26:08.835914211 +0000 UTC m=+647.842323356 I0520 02:26:08.851784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:26:08.851844 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 02:26:08.851837972 +0000 UTC m=+647.858247147 I0520 02:26:08.996365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 02:26:09.033250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkqxx" condition "Approved" to 2026-05-20 02:26:09.033239747 +0000 UTC m=+648.039648892 I0520 02:26:09.051804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkqxx" condition "Ready" to 2026-05-20 02:26:09.051793177 +0000 UTC m=+648.058202322 I0520 02:26:09.083821 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 02:26:09.083808261 +0000 UTC m=+648.090217406 I0520 02:26:09.103689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"