I0528 13:45:44.225507 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0528 13:45:44.225722 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0528 13:45:44.225831 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0528 13:45:44.230923 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0528 13:45:44.231666 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0528 13:45:44.231713 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0528 13:45:44.231801 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0528 13:45:44.235835 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0528 13:45:44.250919 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0528 13:45:44.256175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0528 13:45:44.259522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0528 13:45:44.262261 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0528 13:45:44.262287 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0528 13:45:44.262479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0528 13:45:44.267067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0528 13:45:44.270454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0528 13:45:44.272911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0528 13:45:44.275582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0528 13:45:44.278005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0528 13:45:44.279849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0528 13:45:44.281883 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0528 13:45:44.281931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0528 13:45:44.282032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0528 13:45:44.286622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0528 13:45:44.289828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0528 13:45:44.291584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0528 13:45:44.293242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0528 13:45:44.295106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0528 13:45:44.296820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0528 13:45:44.298608 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0528 13:45:44.298632 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0528 13:45:44.300072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0528 13:45:44.301470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0528 13:45:44.303837 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.304837 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.306165 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.307233 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.350743 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.366527 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.382558 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.398579 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.400571 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:45:44.419413 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 13:46:00.330703 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-28 13:46:00.330664721 +0000 UTC m=+16.141128800 I0528 13:46:00.996413 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-28 13:46:00.996396308 +0000 UTC m=+16.806860397 I0528 13:46:00.996497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:46:00.996518 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 13:46:00.996513843 +0000 UTC m=+16.806977902 E0528 13:46:01.014125 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 13:46:01.014194 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-28 13:46:01.014185652 +0000 UTC m=+16.824649721 E0528 13:46:01.014350 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 13:46:01.016811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:01.016921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:46:01.016998 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 13:46:01.016986513 +0000 UTC m=+16.827450592 E0528 13:46:01.033434 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0528 13:46:01.033483 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 13:46:01.033498 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 13:46:01.033519 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0528 13:46:01.064123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:01.065406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cstlf" condition "Approved" to 2026-05-28 13:46:01.065394506 +0000 UTC m=+16.875858585 I0528 13:46:01.075872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cstlf" condition "Ready" to 2026-05-28 13:46:01.075863933 +0000 UTC m=+16.886327992 I0528 13:46:01.093218 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:01.093211632 +0000 UTC m=+16.903675691 I0528 13:46:01.110665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:01.111132 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:01.111125013 +0000 UTC m=+16.921589092 I0528 13:46:01.125512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:06.033772 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:06.033757826 +0000 UTC m=+21.844221885 I0528 13:46:28.548991 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 13:46:28.548979045 +0000 UTC m=+44.359443104 I0528 13:46:28.549270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:46:28.549324 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-28 13:46:28.549319562 +0000 UTC m=+44.359783621 I0528 13:46:28.563522 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-28 13:46:28.563508774 +0000 UTC m=+44.373972823 I0528 13:46:28.589449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:28.589555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 13:46:28.589545465 +0000 UTC m=+44.400009524 I0528 13:46:28.721684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:28.752419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mdpwk" condition "Approved" to 2026-05-28 13:46:28.752402338 +0000 UTC m=+44.562866427 I0528 13:46:28.786597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mdpwk" condition "Ready" to 2026-05-28 13:46:28.786588455 +0000 UTC m=+44.597052504 I0528 13:46:28.820184 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:28.820169691 +0000 UTC m=+44.630633770 I0528 13:46:28.840041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:28.840294 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:28.840288872 +0000 UTC m=+44.650752931 I0528 13:46:28.864816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:46:28.865217 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:46:28.865210665 +0000 UTC m=+44.675674724 I0528 13:50:43.584883 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-05-28 13:50:43.584870423 +0000 UTC m=+299.395334482 I0528 13:50:43.585703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:50:43.585731 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-05-28 13:50:43.585725166 +0000 UTC m=+299.396189225 I0528 13:50:43.598915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:50:43.598966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:50:43.598978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-05-28 13:50:43.598973332 +0000 UTC m=+299.409437381 I0528 13:50:43.805045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-wxws7" condition "Approved" to 2026-05-28 13:50:43.805036246 +0000 UTC m=+299.615500305 I0528 13:50:43.832107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-wxws7" condition "Ready" to 2026-05-28 13:50:43.832089627 +0000 UTC m=+299.642553716 I0528 13:50:43.861377 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:50:43.861369192 +0000 UTC m=+299.671833241 I0528 13:50:43.879668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:50:43.880010 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:50:43.879992082 +0000 UTC m=+299.690456131 I0528 13:50:43.905242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:51:47.799781 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 13:51:47.799753313 +0000 UTC m=+363.610217392 I0528 13:51:47.799862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:51:47.799932 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 13:51:47.799918179 +0000 UTC m=+363.610382268 I0528 13:51:47.814427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:51:47.814512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:51:47.814536 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 13:51:47.814528848 +0000 UTC m=+363.624992927 E0528 13:51:47.815339 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 13:51:47.815390 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-28 13:51:47.815381257 +0000 UTC m=+363.625845316 E0528 13:51:47.815509 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 13:51:47.828191 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0528 13:51:47.828547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 13:51:47.828588 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 13:51:47.828637 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0528 13:51:47.859142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2lgf8" condition "Approved" to 2026-05-28 13:51:47.859125432 +0000 UTC m=+363.669589491 I0528 13:51:47.872215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2lgf8" condition "Ready" to 2026-05-28 13:51:47.872196319 +0000 UTC m=+363.682660368 I0528 13:51:47.901889 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:51:47.901870102 +0000 UTC m=+363.712334161 I0528 13:51:47.935619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:51:47.936079 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:51:47.936071791 +0000 UTC m=+363.746535840 I0528 13:51:47.957387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:51:47.957806 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:51:47.957791343 +0000 UTC m=+363.768255392 I0528 13:51:52.829747 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:51:52.829729 +0000 UTC m=+368.640193089 I0528 13:52:33.152332 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-28 13:52:33.152316875 +0000 UTC m=+408.962780934 I0528 13:52:33.152403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.152441 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 13:52:33.1524326 +0000 UTC m=+408.962896659 I0528 13:52:33.165141 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 13:52:33.165128704 +0000 UTC m=+408.975592743 I0528 13:52:33.165394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.165411 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 13:52:33.165408896 +0000 UTC m=+408.975872945 I0528 13:52:33.165566 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 13:52:33.165563382 +0000 UTC m=+408.976027431 I0528 13:52:33.165690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.165703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 13:52:33.165701068 +0000 UTC m=+408.976165117 I0528 13:52:33.187103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.187277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.187353 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 13:52:33.187312573 +0000 UTC m=+408.997776622 I0528 13:52:33.201746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.202182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.202748 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 13:52:33.202740304 +0000 UTC m=+409.013204373 I0528 13:52:33.204866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.204961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:33.204989 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 13:52:33.20498509 +0000 UTC m=+409.015449129 I0528 13:52:33.411169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.420890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xsvnh" condition "Approved" to 2026-05-28 13:52:33.420882372 +0000 UTC m=+409.231346431 I0528 13:52:33.426237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.429551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:33.434293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2lhq" condition "Approved" to 2026-05-28 13:52:33.434276616 +0000 UTC m=+409.244740675 I0528 13:52:33.438700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xsvnh" condition "Ready" to 2026-05-28 13:52:33.438692725 +0000 UTC m=+409.249156784 I0528 13:52:33.442760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rhz8w" condition "Approved" to 2026-05-28 13:52:33.442749358 +0000 UTC m=+409.253213397 I0528 13:52:33.450762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2lhq" condition "Ready" to 2026-05-28 13:52:33.450754471 +0000 UTC m=+409.261218530 I0528 13:52:33.462785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rhz8w" condition "Ready" to 2026-05-28 13:52:33.462773386 +0000 UTC m=+409.273237425 I0528 13:52:33.740307 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:33.740294597 +0000 UTC m=+409.550758646 I0528 13:52:33.851389 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:33.851374552 +0000 UTC m=+409.661838631 I0528 13:52:33.896020 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:33.896008003 +0000 UTC m=+409.706472062 I0528 13:52:34.006421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.007135 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:34.00712601 +0000 UTC m=+409.817590099 I0528 13:52:34.148079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.148503 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:34.148494895 +0000 UTC m=+409.958958974 I0528 13:52:34.249030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.249366 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:34.249359248 +0000 UTC m=+410.059823307 I0528 13:52:34.698018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.797307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.848209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:34.896466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:41.309125 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75477-tls" condition "Ready" to 2026-05-28 13:52:41.309107105 +0000 UTC m=+417.119571164 I0528 13:52:41.309141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75477-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:41.309344 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75477-tls" condition "Issuing" to 2026-05-28 13:52:41.309335065 +0000 UTC m=+417.119799124 I0528 13:52:41.325543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75477-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75477-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:41.325631 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75477-tls" condition "Ready" to 2026-05-28 13:52:41.325621352 +0000 UTC m=+417.136085441 I0528 13:52:41.797391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75477-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75477-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:41.832466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-75477-8gfkb" condition "Approved" to 2026-05-28 13:52:41.832457754 +0000 UTC m=+417.642921803 I0528 13:52:41.859378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-75477-8gfkb" condition "Ready" to 2026-05-28 13:52:41.859368399 +0000 UTC m=+417.669832458 I0528 13:52:41.889676 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-75477-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:41.889662463 +0000 UTC m=+417.700126532 I0528 13:52:41.909573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75477-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75477-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:41.980031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75477-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75477-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:54.737169 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 13:52:54.737155757 +0000 UTC m=+430.547619806 I0528 13:52:54.737625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:54.737649 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 13:52:54.73764545 +0000 UTC m=+430.548109499 I0528 13:52:54.757179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:54.757250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:52:54.757284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 13:52:54.75727798 +0000 UTC m=+430.567742039 I0528 13:52:54.946074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fmjgd" condition "Approved" to 2026-05-28 13:52:54.946058241 +0000 UTC m=+430.756522300 I0528 13:52:54.962495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fmjgd" condition "Ready" to 2026-05-28 13:52:54.962469314 +0000 UTC m=+430.772933383 I0528 13:52:55.008719 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:52:55.008696843 +0000 UTC m=+430.819160882 I0528 13:52:55.031244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:52:55.086607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:08.835212 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 13:56:08.835195348 +0000 UTC m=+624.645659407 I0528 13:56:08.835296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:56:08.835682 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 13:56:08.835675036 +0000 UTC m=+624.646139095 I0528 13:56:08.853001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:08.853201 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 13:56:08.853162788 +0000 UTC m=+624.663626877 I0528 13:56:09.149122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:09.205487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-67qm5" condition "Approved" to 2026-05-28 13:56:09.205473441 +0000 UTC m=+625.015937520 I0528 13:56:09.238370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-67qm5" condition "Ready" to 2026-05-28 13:56:09.238360693 +0000 UTC m=+625.048824742 I0528 13:56:09.270250 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:56:09.270233245 +0000 UTC m=+625.080697334 I0528 13:56:09.292686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:09.293103 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:56:09.293095806 +0000 UTC m=+625.103559855 I0528 13:56:09.312637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:49.123273 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 13:56:49.123260832 +0000 UTC m=+664.933724881 I0528 13:56:49.123426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 13:56:49.123532 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 13:56:49.123520308 +0000 UTC m=+664.933984397 I0528 13:56:49.163522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:49.163576 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 13:56:49.163569433 +0000 UTC m=+664.974033482 I0528 13:56:49.455967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:49.489883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-phzqz" condition "Approved" to 2026-05-28 13:56:49.489876015 +0000 UTC m=+665.300340064 I0528 13:56:49.507096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-phzqz" condition "Ready" to 2026-05-28 13:56:49.507084599 +0000 UTC m=+665.317548658 I0528 13:56:49.549646 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:56:49.549635754 +0000 UTC m=+665.360099813 I0528 13:56:49.566502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 13:56:49.566780 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 13:56:49.566773663 +0000 UTC m=+665.377237732 I0528 13:56:49.588382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"