I0515 21:18:46.173405 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 21:18:46.173661 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 21:18:46.173852 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 21:18:46.177319 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 21:18:46.177786 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 21:18:46.177891 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 21:18:46.177883 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 21:18:46.180592 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 21:18:46.195826 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 21:18:46.200691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 21:18:46.203540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 21:18:46.206594 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 21:18:46.209048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 21:18:46.213457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 21:18:46.215250 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 21:18:46.215274 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 21:18:46.215333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 21:18:46.217236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 21:18:46.219176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 21:18:46.220859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 21:18:46.222509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 21:18:46.222644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 21:18:46.224544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 21:18:46.229235 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 21:18:46.229275 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 21:18:46.229326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 21:18:46.233476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 21:18:46.236374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 21:18:46.239046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 21:18:46.241362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 21:18:46.241424 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 21:18:46.243317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 21:18:46.245586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 21:18:46.248302 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.248808 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.249128 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.268462 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.282903 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.297138 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.310785 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.326128 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.330966 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:46.338890 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 21:18:58.186983 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-15 21:18:58.186970086 +0000 UTC m=+12.044448001 I0515 21:18:58.929921 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 21:18:58.929907512 +0000 UTC m=+12.787385457 I0515 21:18:58.931041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:18:58.931069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 21:18:58.931065175 +0000 UTC m=+12.788543090 I0515 21:18:58.948259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:18:58.948325 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 21:18:58.948318917 +0000 UTC m=+12.805796822 E0515 21:18:58.948710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 21:18:58.948763 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-15 21:18:58.94875582 +0000 UTC m=+12.806233745 E0515 21:18:58.948789 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 21:18:58.967509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0515 21:18:58.968796 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0515 21:18:58.968956 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 21:18:58.968988 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 21:18:58.969124 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0515 21:18:58.988415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w8gck" condition "Approved" to 2026-05-15 21:18:58.988405166 +0000 UTC m=+12.845883081 I0515 21:18:59.000858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w8gck" condition "Ready" to 2026-05-15 21:18:59.000848069 +0000 UTC m=+12.858326004 I0515 21:18:59.021964 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:18:59.021955475 +0000 UTC m=+12.879433400 I0515 21:18:59.041453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:18:59.041837 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:18:59.041828984 +0000 UTC m=+12.899306899 I0515 21:18:59.043600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:18:59.054276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:18:59.054656 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:18:59.054645999 +0000 UTC m=+12.912123924 I0515 21:18:59.054943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:19:03.969866 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:19:03.969852282 +0000 UTC m=+17.827330207 I0515 21:19:26.660376 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 21:19:26.660355404 +0000 UTC m=+40.517833319 I0515 21:19:26.660472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:19:26.660906 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 21:19:26.660884572 +0000 UTC m=+40.518362517 I0515 21:19:26.693128 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-15 21:19:26.693113399 +0000 UTC m=+40.550591314 I0515 21:19:26.703148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:19:26.703442 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 21:19:26.703423968 +0000 UTC m=+40.560901993 I0515 21:19:26.836664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:19:26.872669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qd9lj" condition "Approved" to 2026-05-15 21:19:26.872650853 +0000 UTC m=+40.730128778 I0515 21:19:26.911029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qd9lj" condition "Ready" to 2026-05-15 21:19:26.911011803 +0000 UTC m=+40.768489758 I0515 21:19:26.942228 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:19:26.942208053 +0000 UTC m=+40.799685978 I0515 21:19:26.965851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:23:49.833655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:23:49.833705 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready" to 2026-05-15 21:23:49.83368116 +0000 UTC m=+303.691159115 I0515 21:23:49.833842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Issuing" to 2026-05-15 21:23:49.8338311 +0000 UTC m=+303.691309045 I0515 21:23:49.851954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:23:49.852036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:23:49.852059 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Issuing" to 2026-05-15 21:23:49.852050586 +0000 UTC m=+303.709528511 I0515 21:23:50.112832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-fmpkf" condition "Approved" to 2026-05-15 21:23:50.112817485 +0000 UTC m=+303.970295430 I0515 21:23:50.139593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-fmpkf" condition "Ready" to 2026-05-15 21:23:50.139576791 +0000 UTC m=+303.997054706 I0515 21:23:50.176612 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:23:50.17660099 +0000 UTC m=+304.034078915 I0515 21:23:50.197309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:23:50.197810 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:23:50.197802614 +0000 UTC m=+304.055280539 I0515 21:23:50.218397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:24:56.554743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:24:56.554783 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 21:24:56.554773119 +0000 UTC m=+370.412251074 I0515 21:24:56.555209 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 21:24:56.55518968 +0000 UTC m=+370.412667625 E0515 21:24:56.570943 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 21:24:56.571163 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-15 21:24:56.571148788 +0000 UTC m=+370.428626743 I0515 21:24:56.571387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:24:56.571548 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 21:24:56.571539909 +0000 UTC m=+370.429017834 E0515 21:24:56.571392 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 21:24:56.584447 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0515 21:24:56.584752 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 21:24:56.584821 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 21:24:56.584913 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0515 21:24:56.586106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:24:56.618929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plvq6" condition "Approved" to 2026-05-15 21:24:56.618913841 +0000 UTC m=+370.476391796 I0515 21:24:56.642935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plvq6" condition "Ready" to 2026-05-15 21:24:56.642920961 +0000 UTC m=+370.500398916 I0515 21:24:56.700449 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:24:56.700439181 +0000 UTC m=+370.557917106 I0515 21:24:56.713960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:24:56.715065 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:24:56.715057164 +0000 UTC m=+370.572535089 I0515 21:24:56.726262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:24:56.729493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:01.585705 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:01.585690566 +0000 UTC m=+375.443168511 I0515 21:25:41.106408 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 21:25:41.106396509 +0000 UTC m=+414.963874434 I0515 21:25:41.107116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:41.107187 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 21:25:41.107180067 +0000 UTC m=+414.964658002 I0515 21:25:41.107536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:41.107578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 21:25:41.107574121 +0000 UTC m=+414.965052036 I0515 21:25:41.108103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 21:25:41.108098251 +0000 UTC m=+414.965576166 I0515 21:25:41.113911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:41.114044 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 21:25:41.114010753 +0000 UTC m=+414.971488678 I0515 21:25:41.114540 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 21:25:41.114535122 +0000 UTC m=+414.972013037 I0515 21:25:41.145294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.145452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:41.145558 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 21:25:41.145547858 +0000 UTC m=+415.003025813 I0515 21:25:41.151696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.152054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:41.152080 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 21:25:41.152074423 +0000 UTC m=+415.009552338 I0515 21:25:41.152413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.152446 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 21:25:41.152442796 +0000 UTC m=+415.009920711 I0515 21:25:41.291777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9m84h" condition "Approved" to 2026-05-15 21:25:41.29176719 +0000 UTC m=+415.149245105 I0515 21:25:41.321322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9m84h" condition "Ready" to 2026-05-15 21:25:41.321313844 +0000 UTC m=+415.178791749 I0515 21:25:41.348387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.358605 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:41.358592545 +0000 UTC m=+415.216070480 I0515 21:25:41.387901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.389883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jn6nr" condition "Approved" to 2026-05-15 21:25:41.38987228 +0000 UTC m=+415.247350235 I0515 21:25:41.411602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jn6nr" condition "Ready" to 2026-05-15 21:25:41.411593053 +0000 UTC m=+415.269070968 I0515 21:25:41.453761 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:41.45374577 +0000 UTC m=+415.311223685 I0515 21:25:41.488408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.488754 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:41.488747789 +0000 UTC m=+415.346225724 I0515 21:25:41.532035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.781068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:41.984749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:42.041881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wzmpd" condition "Approved" to 2026-05-15 21:25:42.041865482 +0000 UTC m=+415.899343427 I0515 21:25:42.242421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wzmpd" condition "Ready" to 2026-05-15 21:25:42.242408694 +0000 UTC m=+416.099886619 I0515 21:25:42.583855 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:42.583837533 +0000 UTC m=+416.441315478 I0515 21:25:42.685203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:42.685811 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:42.685799071 +0000 UTC m=+416.543277026 I0515 21:25:42.882649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:49.308033 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" condition "Ready" to 2026-05-15 21:25:49.308018274 +0000 UTC m=+423.165496209 I0515 21:25:49.308699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:49.308755 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" condition "Issuing" to 2026-05-15 21:25:49.308750541 +0000 UTC m=+423.166228456 I0515 21:25:49.323672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:25:49.323783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:25:49.323814 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" condition "Issuing" to 2026-05-15 21:25:49.323808774 +0000 UTC m=+423.181286689 I0515 21:25:49.818539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s7nn8-mrw5g" condition "Approved" to 2026-05-15 21:25:49.818513861 +0000 UTC m=+423.675991776 I0515 21:25:49.852199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s7nn8-mrw5g" condition "Ready" to 2026-05-15 21:25:49.85218789 +0000 UTC m=+423.709665815 I0515 21:25:49.891506 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:25:49.891496799 +0000 UTC m=+423.748974714 I0515 21:25:49.917718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s7nn8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:26:01.456559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:26:01.456595 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 21:26:01.456588135 +0000 UTC m=+435.314066050 I0515 21:26:01.459862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 21:26:01.459822572 +0000 UTC m=+435.317300517 I0515 21:26:01.483024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:26:01.483240 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 21:26:01.483228582 +0000 UTC m=+435.340706507 I0515 21:26:01.872268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:26:01.901011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v9xwl" condition "Approved" to 2026-05-15 21:26:01.900996115 +0000 UTC m=+435.758474050 I0515 21:26:01.932591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v9xwl" condition "Ready" to 2026-05-15 21:26:01.932579946 +0000 UTC m=+435.790057871 I0515 21:26:01.968483 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:26:01.968466228 +0000 UTC m=+435.825944153 I0515 21:26:01.985429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:29:23.240265 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 21:29:23.240245612 +0000 UTC m=+637.097723567 I0515 21:29:23.240344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:29:23.240532 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 21:29:23.240523347 +0000 UTC m=+637.098001302 I0515 21:29:23.259397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:29:23.259509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:29:23.259529 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 21:29:23.259522641 +0000 UTC m=+637.117000566 I0515 21:29:23.381992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mrsjk" condition "Approved" to 2026-05-15 21:29:23.381980985 +0000 UTC m=+637.239458920 I0515 21:29:23.410972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mrsjk" condition "Ready" to 2026-05-15 21:29:23.410954918 +0000 UTC m=+637.268432843 I0515 21:29:23.445520 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:29:23.445504048 +0000 UTC m=+637.302981973 I0515 21:29:23.469267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:29:23.469834 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:29:23.469825685 +0000 UTC m=+637.327303610 I0515 21:29:23.490373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:29:23.490805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:30:04.671414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 21:30:04.671730 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-15 21:30:04.671719768 +0000 UTC m=+678.529197773 I0515 21:30:04.671930 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 21:30:04.671905098 +0000 UTC m=+678.529383023 I0515 21:30:04.707951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:30:04.708083 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 21:30:04.708034705 +0000 UTC m=+678.565512630 I0515 21:30:04.891239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:30:04.929885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jlk7f" condition "Approved" to 2026-05-15 21:30:04.92987321 +0000 UTC m=+678.787351145 I0515 21:30:04.947834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jlk7f" condition "Ready" to 2026-05-15 21:30:04.947824056 +0000 UTC m=+678.805301981 I0515 21:30:04.976512 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:30:04.976491355 +0000 UTC m=+678.833969280 I0515 21:30:05.003022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 21:30:05.003517 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 21:30:05.003508 +0000 UTC m=+678.860985925 I0515 21:30:05.027531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"