I0521 19:35:01.800471 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0521 19:35:01.800601 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0521 19:35:01.800705 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0521 19:35:01.805929 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0521 19:35:01.806684 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0521 19:35:01.806687 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0521 19:35:01.807000 1 controller.go:156] "cert-manager/controller: starting leader election" I0521 19:35:01.811914 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0521 19:35:01.828653 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0521 19:35:01.834005 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0521 19:35:01.837713 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0521 19:35:01.840216 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0521 19:35:01.840248 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0521 19:35:01.840262 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0521 19:35:01.840341 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0521 19:35:01.845571 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0521 19:35:01.848240 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0521 19:35:01.850195 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0521 19:35:01.852096 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0521 19:35:01.853907 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0521 19:35:01.855945 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0521 19:35:01.857610 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0521 19:35:01.857767 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0521 19:35:01.864711 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0521 19:35:01.869167 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0521 19:35:01.871541 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0521 19:35:01.873903 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0521 19:35:01.873989 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0521 19:35:01.876586 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0521 19:35:01.878914 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0521 19:35:01.881496 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0521 19:35:01.881690 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0521 19:35:01.884228 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0521 19:35:13.477352 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-21 19:35:13.477326927 +0000 UTC m=+11.711867105 I0521 19:35:14.187026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-21 19:35:14.187008568 +0000 UTC m=+12.421548756 I0521 19:35:14.187616 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:35:14.187672 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 19:35:14.187663265 +0000 UTC m=+12.422203413 E0521 19:35:14.201768 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:35:14.201876 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-21 19:35:14.201869536 +0000 UTC m=+12.436409694 E0521 19:35:14.201928 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:35:14.204394 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:14.204510 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:35:14.204540 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 19:35:14.204530835 +0000 UTC m=+12.439071023 E0521 19:35:14.211152 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0521 19:35:14.211245 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:35:14.211285 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:35:14.211320 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0521 19:35:14.265240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6r6nf" condition "Approved" to 2026-05-21 19:35:14.265220947 +0000 UTC m=+12.499761125 I0521 19:35:14.290067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6r6nf" condition "Ready" to 2026-05-21 19:35:14.290053465 +0000 UTC m=+12.524593643 I0521 19:35:14.327738 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:35:14.327721477 +0000 UTC m=+12.562261635 I0521 19:35:14.344536 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:14.344905 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:35:14.344895895 +0000 UTC m=+12.579436073 I0521 19:35:14.357640 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:14.364258 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:14.364637 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:35:14.364625209 +0000 UTC m=+12.599165397 I0521 19:35:19.212448 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:35:19.212434142 +0000 UTC m=+17.446974330 I0521 19:35:38.627457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-21 19:35:38.627435644 +0000 UTC m=+36.861975792 I0521 19:35:38.627512 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:35:38.627639 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-21 19:35:38.627627919 +0000 UTC m=+36.862168107 I0521 19:35:38.640322 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-21 19:35:38.640304779 +0000 UTC m=+36.874844967 I0521 19:35:38.647905 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:38.647984 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:35:38.648005 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-21 19:35:38.64799971 +0000 UTC m=+36.882539868 I0521 19:35:39.018253 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:35:39.030449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cfj4w" condition "Approved" to 2026-05-21 19:35:39.030422239 +0000 UTC m=+37.264962397 I0521 19:35:39.058785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cfj4w" condition "Ready" to 2026-05-21 19:35:39.058771899 +0000 UTC m=+37.293312057 I0521 19:35:39.091825 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:35:39.09181009 +0000 UTC m=+37.326350258 I0521 19:35:39.111763 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:38:07.123707 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready" to 2026-05-21 19:38:07.123669647 +0000 UTC m=+185.358209805 I0521 19:38:07.123712 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:38:07.123782 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-05-21 19:38:07.1237726 +0000 UTC m=+185.358312788 I0521 19:38:07.144662 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:38:07.144750 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:38:07.144772 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-05-21 19:38:07.14476568 +0000 UTC m=+185.379305838 I0521 19:38:07.505584 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:38:07.516232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-kmn4h" condition "Approved" to 2026-05-21 19:38:07.516218009 +0000 UTC m=+185.750758187 I0521 19:38:07.542202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-kmn4h" condition "Ready" to 2026-05-21 19:38:07.542188458 +0000 UTC m=+185.776728616 I0521 19:38:07.566502 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:38:07.566490145 +0000 UTC m=+185.801030313 I0521 19:38:07.584211 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:38:07.625314 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:08.939410 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:08.939449 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-21 19:39:08.939439553 +0000 UTC m=+247.173979731 I0521 19:39:08.939580 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:39:08.939559706 +0000 UTC m=+247.174099864 E0521 19:39:08.952346 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:39:08.952392 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-21 19:39:08.9523825 +0000 UTC m=+247.186922658 E0521 19:39:08.952440 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:39:08.954453 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:08.954550 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:39:08.954540486 +0000 UTC m=+247.189080644 E0521 19:39:08.972953 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0521 19:39:08.973064 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:39:08.973122 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:39:08.973181 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0521 19:39:08.976541 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:08.976549 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:08.976630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:39:08.976620212 +0000 UTC m=+247.211160400 I0521 19:39:08.976924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ls8m4" condition "Approved" to 2026-05-21 19:39:08.97691596 +0000 UTC m=+247.211456108 I0521 19:39:08.989515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ls8m4" condition "Ready" to 2026-05-21 19:39:08.989468848 +0000 UTC m=+247.224009006 I0521 19:39:09.010307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:09.010293261 +0000 UTC m=+247.244833419 I0521 19:39:09.029878 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:13.973766 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:13.973748669 +0000 UTC m=+252.208288847 I0521 19:39:50.997702 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:50.997753 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-21 19:39:50.997747077 +0000 UTC m=+289.232287225 I0521 19:39:50.998040 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 19:39:50.998034764 +0000 UTC m=+289.232574912 I0521 19:39:51.012261 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:51.012290 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 19:39:51.012284125 +0000 UTC m=+289.246824273 I0521 19:39:51.012496 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-21 19:39:51.01248112 +0000 UTC m=+289.247021278 I0521 19:39:51.020250 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:51.020302 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-21 19:39:51.020292713 +0000 UTC m=+289.254832871 I0521 19:39:51.020326 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-21 19:39:51.020311673 +0000 UTC m=+289.254851821 I0521 19:39:51.036178 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.036231 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 19:39:51.036225136 +0000 UTC m=+289.270765274 I0521 19:39:51.052691 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.052756 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:51.052777 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-21 19:39:51.052772187 +0000 UTC m=+289.287312335 I0521 19:39:51.054089 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.054148 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-21 19:39:51.054144062 +0000 UTC m=+289.288684230 I0521 19:39:51.210310 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.247300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rc4hn" condition "Approved" to 2026-05-21 19:39:51.247288326 +0000 UTC m=+289.481828484 I0521 19:39:51.278897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rc4hn" condition "Ready" to 2026-05-21 19:39:51.278884227 +0000 UTC m=+289.513424385 I0521 19:39:51.287396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-svgzf" condition "Approved" to 2026-05-21 19:39:51.287383988 +0000 UTC m=+289.521924146 I0521 19:39:51.308487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-svgzf" condition "Ready" to 2026-05-21 19:39:51.308471785 +0000 UTC m=+289.543011973 I0521 19:39:51.336297 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:51.336327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 19:39:51.336321289 +0000 UTC m=+289.570861437 I0521 19:39:51.351779 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.358969 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.365662 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:51.36565144 +0000 UTC m=+289.600191588 I0521 19:39:51.366262 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:51.366248995 +0000 UTC m=+289.600789143 I0521 19:39:51.500649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz7hs" condition "Approved" to 2026-05-21 19:39:51.500626294 +0000 UTC m=+289.735166472 I0521 19:39:51.647189 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:51.647866 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:51.647858928 +0000 UTC m=+289.882399086 I0521 19:39:52.154045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz7hs" condition "Ready" to 2026-05-21 19:39:52.154033891 +0000 UTC m=+290.388574049 I0521 19:39:52.344585 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:52.468294 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:52.800512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cq427" condition "Approved" to 2026-05-21 19:39:52.800494326 +0000 UTC m=+291.035034514 I0521 19:39:53.153985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cq427" condition "Ready" to 2026-05-21 19:39:53.153974254 +0000 UTC m=+291.388514402 I0521 19:39:53.344772 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0521 19:39:53.390203 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"alertmanager-tls-52krh\" not found" key="monitoring/alertmanager-tls" I0521 19:39:53.797052 1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-cq427" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-sfbvm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0521 19:39:53.847118 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:53.893833 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:54.140658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6dkjl" condition "Approved" to 2026-05-21 19:39:54.140643703 +0000 UTC m=+292.375183851 I0521 19:39:54.203307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6dkjl" condition "Ready" to 2026-05-21 19:39:54.20329409 +0000 UTC m=+292.437834248 I0521 19:39:54.646414 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:54.646402706 +0000 UTC m=+292.880942864 I0521 19:39:54.749727 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:54.750251 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:54.750243752 +0000 UTC m=+292.984783910 I0521 19:39:55.072457 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:55.072629 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:59.165627 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" condition "Ready" to 2026-05-21 19:39:59.165609639 +0000 UTC m=+297.400149797 I0521 19:39:59.165651 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:39:59.165684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" condition "Issuing" to 2026-05-21 19:39:59.16567355 +0000 UTC m=+297.400213748 I0521 19:39:59.193415 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:59.193513 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" condition "Ready" to 2026-05-21 19:39:59.193502433 +0000 UTC m=+297.428042611 I0521 19:39:59.300541 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:59.340841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c8pbk-qn4p9" condition "Approved" to 2026-05-21 19:39:59.340826797 +0000 UTC m=+297.575366955 I0521 19:39:59.379334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c8pbk-qn4p9" condition "Ready" to 2026-05-21 19:39:59.379323897 +0000 UTC m=+297.613864055 I0521 19:39:59.421701 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:59.421688938 +0000 UTC m=+297.656229096 I0521 19:39:59.444848 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:59.445917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:39:59.445908386 +0000 UTC m=+297.680448544 I0521 19:39:59.460335 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:39:59.473643 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8pbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:40:20.586692 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:40:20.586716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-21 19:40:20.586709523 +0000 UTC m=+318.821249671 I0521 19:40:20.586825 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-21 19:40:20.586800366 +0000 UTC m=+318.821340584 I0521 19:40:20.604853 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:40:20.604943 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:40:20.604960 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-21 19:40:20.604954083 +0000 UTC m=+318.839494241 I0521 19:40:20.903759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-js7xf" condition "Approved" to 2026-05-21 19:40:20.903739483 +0000 UTC m=+319.138279641 I0521 19:40:20.922337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-js7xf" condition "Ready" to 2026-05-21 19:40:20.922324422 +0000 UTC m=+319.156864570 I0521 19:40:20.946959 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:40:20.946945939 +0000 UTC m=+319.181486087 I0521 19:40:20.968435 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:40:20.969086 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:40:20.96907943 +0000 UTC m=+319.203619588 I0521 19:40:20.977754 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:40:20.986102 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.084746 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:42.084808 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 19:43:42.08480001 +0000 UTC m=+520.319340198 I0521 19:43:42.084744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-21 19:43:42.084700077 +0000 UTC m=+520.319240235 I0521 19:43:42.101333 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.101398 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:42.101548 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 19:43:42.101542077 +0000 UTC m=+520.336082225 I0521 19:43:42.251153 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.263699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6ltmh" condition "Approved" to 2026-05-21 19:43:42.263679206 +0000 UTC m=+520.498219364 I0521 19:43:42.285589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6ltmh" condition "Ready" to 2026-05-21 19:43:42.285572627 +0000 UTC m=+520.520112785 I0521 19:43:42.314617 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:42.314608384 +0000 UTC m=+520.549148542 I0521 19:43:42.352245 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.352630 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:42.352617995 +0000 UTC m=+520.587158143 I0521 19:43:42.368215 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.368770 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:42.368759536 +0000 UTC m=+520.603299704