I0525 22:03:39.068852 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0525 22:03:39.069193 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0525 22:03:39.069293 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0525 22:03:39.073291 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0525 22:03:39.073861 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0525 22:03:39.073994 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0525 22:03:39.074026 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0525 22:03:39.076559 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0525 22:03:39.093046 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0525 22:03:39.096388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0525 22:03:39.096424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0525 22:03:39.096442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0525 22:03:39.100564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0525 22:03:39.105520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0525 22:03:39.108726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0525 22:03:39.111428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0525 22:03:39.114242 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0525 22:03:39.114332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0525 22:03:39.117088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0525 22:03:39.120053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0525 22:03:39.125054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0525 22:03:39.130501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0525 22:03:39.133302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0525 22:03:39.135896 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0525 22:03:39.135966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0525 22:03:39.138782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0525 22:03:39.140964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0525 22:03:39.142864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0525 22:03:39.144733 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0525 22:03:39.144776 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0525 22:03:39.144871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0525 22:03:39.146879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0525 22:03:39.151053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0525 22:03:39.154817 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.155112 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.155131 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.155598 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.173129 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.191281 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.226639 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.236018 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.258177 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:39.292320 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 22:03:52.269050 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-25 22:03:52.269037184 +0000 UTC m=+13.249490116 I0525 22:03:52.957567 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-25 22:03:52.957555801 +0000 UTC m=+13.938008733 I0525 22:03:52.957958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:03:52.958105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 22:03:52.958094345 +0000 UTC m=+13.938547297 E0525 22:03:52.973845 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 22:03:52.973988 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-25 22:03:52.973955354 +0000 UTC m=+13.954408316 E0525 22:03:52.974027 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 22:03:52.977422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:03:52.977503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:03:52.977526 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 22:03:52.977520924 +0000 UTC m=+13.957973856 E0525 22:03:52.986953 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0525 22:03:52.987264 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 22:03:52.987453 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 22:03:52.987552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0525 22:03:53.018148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ngg57" condition "Approved" to 2026-05-25 22:03:53.018136188 +0000 UTC m=+13.998589120 I0525 22:03:53.030829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ngg57" condition "Ready" to 2026-05-25 22:03:53.030818734 +0000 UTC m=+14.011271676 I0525 22:03:53.051037 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:03:53.051026267 +0000 UTC m=+14.031479199 I0525 22:03:53.071875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:03:57.987533 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:03:57.987519054 +0000 UTC m=+18.967971986 I0525 22:04:25.737227 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-25 22:04:25.737195447 +0000 UTC m=+46.717648369 I0525 22:04:25.737503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:04:25.737521 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 22:04:25.737518811 +0000 UTC m=+46.717971733 I0525 22:04:25.751939 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-25 22:04:25.751926984 +0000 UTC m=+46.732379906 I0525 22:04:25.783327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:04:25.783402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:04:25.783422 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 22:04:25.783416248 +0000 UTC m=+46.763869180 I0525 22:04:26.018938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xw7rk" condition "Approved" to 2026-05-25 22:04:26.01892507 +0000 UTC m=+46.999377992 I0525 22:04:26.055433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xw7rk" condition "Ready" to 2026-05-25 22:04:26.055418945 +0000 UTC m=+47.035871907 I0525 22:04:26.089985 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:04:26.089974424 +0000 UTC m=+47.070427336 I0525 22:04:26.119641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:04:26.120100 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:04:26.12008908 +0000 UTC m=+47.100542002 I0525 22:04:26.161117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:09:20.142365 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-05-25 22:09:20.142355381 +0000 UTC m=+341.122808313 I0525 22:09:20.142820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:09:20.142841 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-05-25 22:09:20.142837105 +0000 UTC m=+341.123290037 I0525 22:09:20.158155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:09:20.158199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:09:20.158211 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-05-25 22:09:20.158207089 +0000 UTC m=+341.138660021 I0525 22:09:20.521029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:09:20.529481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-6s79p" condition "Approved" to 2026-05-25 22:09:20.529474167 +0000 UTC m=+341.509927099 I0525 22:09:20.561822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-6s79p" condition "Ready" to 2026-05-25 22:09:20.561807222 +0000 UTC m=+341.542260154 I0525 22:09:20.588580 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:09:20.588569937 +0000 UTC m=+341.569022869 I0525 22:09:20.609014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:24.994918 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-25 22:10:24.994895649 +0000 UTC m=+405.975348631 I0525 22:10:24.995632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:10:24.995682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-25 22:10:24.995671506 +0000 UTC m=+405.976124488 E0525 22:10:25.007994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 22:10:25.008063 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-25 22:10:25.008055759 +0000 UTC m=+405.988508681 E0525 22:10:25.008086 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 22:10:25.012855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:25.012926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:10:25.012946 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-25 22:10:25.012939825 +0000 UTC m=+405.993392757 E0525 22:10:25.022309 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0525 22:10:25.022371 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 22:10:25.022499 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 22:10:25.022614 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0525 22:10:25.050200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:25.050403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6g2tz" condition "Approved" to 2026-05-25 22:10:25.050393907 +0000 UTC m=+406.030846839 I0525 22:10:25.067297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6g2tz" condition "Ready" to 2026-05-25 22:10:25.067286045 +0000 UTC m=+406.047738977 I0525 22:10:25.089901 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:10:25.089886057 +0000 UTC m=+406.070339009 I0525 22:10:25.113550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:25.113759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:10:25.113752384 +0000 UTC m=+406.094205316 I0525 22:10:25.124037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:25.129375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:10:30.023543 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:10:30.023529533 +0000 UTC m=+411.003982485 I0525 22:11:10.214630 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-25 22:11:10.214615232 +0000 UTC m=+451.195068164 I0525 22:11:10.214867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:10.214963 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-25 22:11:10.214955775 +0000 UTC m=+451.195408707 I0525 22:11:10.219882 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 22:11:10.2198701 +0000 UTC m=+451.200323082 I0525 22:11:10.220214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:10.220239 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-25 22:11:10.220234563 +0000 UTC m=+451.200687495 I0525 22:11:10.220797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:10.220845 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-25 22:11:10.220837195 +0000 UTC m=+451.201290127 I0525 22:11:10.228592 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-25 22:11:10.22857339 +0000 UTC m=+451.209026422 I0525 22:11:10.299203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.299281 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 22:11:10.299273637 +0000 UTC m=+451.279726549 I0525 22:11:10.346622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.346702 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-25 22:11:10.346689242 +0000 UTC m=+451.327142194 I0525 22:11:10.357963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.358182 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-25 22:11:10.358168732 +0000 UTC m=+451.338621664 I0525 22:11:10.474908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.509242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.509911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wsxpt" condition "Approved" to 2026-05-25 22:11:10.509899284 +0000 UTC m=+451.490352196 I0525 22:11:10.531668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.532565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wsxpt" condition "Ready" to 2026-05-25 22:11:10.532558273 +0000 UTC m=+451.513011195 I0525 22:11:10.567283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sm5gk" condition "Approved" to 2026-05-25 22:11:10.567268854 +0000 UTC m=+451.547721776 I0525 22:11:10.582196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c27b7" condition "Approved" to 2026-05-25 22:11:10.582178567 +0000 UTC m=+451.562631499 I0525 22:11:10.593991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sm5gk" condition "Ready" to 2026-05-25 22:11:10.593981438 +0000 UTC m=+451.574434360 I0525 22:11:10.608529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-c27b7" condition "Ready" to 2026-05-25 22:11:10.608485127 +0000 UTC m=+451.588938059 I0525 22:11:10.647765 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:10.647755981 +0000 UTC m=+451.628208903 I0525 22:11:10.901736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:10.902015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:10.902009606 +0000 UTC m=+451.882462538 I0525 22:11:11.066485 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:11.066473395 +0000 UTC m=+452.046926317 I0525 22:11:11.278505 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:11.278484817 +0000 UTC m=+452.258937789 I0525 22:11:11.309435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:11.401059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:11.401375 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:11.401369702 +0000 UTC m=+452.381822634 I0525 22:11:11.505508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:11.505988 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:11.505978744 +0000 UTC m=+452.486431696 I0525 22:11:11.905002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:11.954587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:12.053077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:12.102130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:17.888161 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" condition "Ready" to 2026-05-25 22:11:17.888146391 +0000 UTC m=+458.868599323 I0525 22:11:17.888416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:17.888770 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" condition "Issuing" to 2026-05-25 22:11:17.888748043 +0000 UTC m=+458.869200985 I0525 22:11:17.907696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:17.907781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:17.907806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" condition "Issuing" to 2026-05-25 22:11:17.907797417 +0000 UTC m=+458.888250369 I0525 22:11:18.542993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mlfjt-trszk" condition "Approved" to 2026-05-25 22:11:18.542980062 +0000 UTC m=+459.523432984 I0525 22:11:18.639632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mlfjt-trszk" condition "Ready" to 2026-05-25 22:11:18.639616146 +0000 UTC m=+459.620069098 I0525 22:11:19.178272 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:19.178255168 +0000 UTC m=+460.158708100 I0525 22:11:19.206113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:19.207998 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:19.207800481 +0000 UTC m=+460.188253413 I0525 22:11:19.221005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:19.297130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlfjt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:35.412430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:35.412463 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-25 22:11:35.412454595 +0000 UTC m=+476.392907527 I0525 22:11:35.412753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-25 22:11:35.412729415 +0000 UTC m=+476.393182347 I0525 22:11:35.432903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:35.432965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:11:35.432982 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-25 22:11:35.432977331 +0000 UTC m=+476.413430253 I0525 22:11:35.794217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f7nqs" condition "Approved" to 2026-05-25 22:11:35.794202662 +0000 UTC m=+476.774655594 I0525 22:11:35.821063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f7nqs" condition "Ready" to 2026-05-25 22:11:35.82104793 +0000 UTC m=+476.801500882 I0525 22:11:35.861105 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:35.861090446 +0000 UTC m=+476.841543368 I0525 22:11:35.912749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:11:35.913334 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:11:35.913320395 +0000 UTC m=+476.893773387 I0525 22:11:35.940758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" E0525 22:14:35.393632 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out I0525 22:15:40.589751 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-25 22:15:40.589732405 +0000 UTC m=+721.570185367 I0525 22:15:40.590256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:15:40.590333 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-25 22:15:40.59032435 +0000 UTC m=+721.570777292 I0525 22:15:40.608307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:15:40.608432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:15:40.608482 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-25 22:15:40.608446377 +0000 UTC m=+721.588899299 I0525 22:15:41.156928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tgg2j" condition "Approved" to 2026-05-25 22:15:41.156916347 +0000 UTC m=+722.137369289 I0525 22:15:41.175326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tgg2j" condition "Ready" to 2026-05-25 22:15:41.175314168 +0000 UTC m=+722.155767100 I0525 22:15:41.204526 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:15:41.204515657 +0000 UTC m=+722.184968589 I0525 22:15:41.229893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:15:41.230257 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:15:41.230250469 +0000 UTC m=+722.210703391 I0525 22:15:41.250395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:16:20.868987 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-25 22:16:20.868968147 +0000 UTC m=+761.849421099 I0525 22:16:20.869120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 22:16:20.869155 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-25 22:16:20.869148549 +0000 UTC m=+761.849601471 I0525 22:16:20.910528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:16:20.910616 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-25 22:16:20.910610112 +0000 UTC m=+761.891063034 I0525 22:16:21.105727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 22:16:21.167820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lx4zn" condition "Approved" to 2026-05-25 22:16:21.167809487 +0000 UTC m=+762.148262409 I0525 22:16:21.187844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lx4zn" condition "Ready" to 2026-05-25 22:16:21.187833877 +0000 UTC m=+762.168286799 I0525 22:16:21.326922 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 22:16:21.326901834 +0000 UTC m=+762.307354796 I0525 22:16:21.421174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"