I0505 16:53:47.648694 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 16:53:47.648801 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 16:53:47.648877 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 16:53:47.652335 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 16:53:47.652730 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 16:53:47.652807 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 16:53:47.652860 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 16:53:47.655509 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 16:53:47.670425 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 16:53:47.676603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 16:53:47.681434 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 16:53:47.681503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 16:53:47.684331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 16:53:47.686951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 16:53:47.689250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 16:53:47.690867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 16:53:47.692731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 16:53:47.692747 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 16:53:47.692755 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 16:53:47.692764 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 16:53:47.692796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 16:53:47.698318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 16:53:47.700921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 16:53:47.703179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 16:53:47.705387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 16:53:47.707899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 16:53:47.709768 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 16:53:47.711560 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 16:53:47.711711 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 16:53:47.713597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 16:53:47.717377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 16:53:47.721145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 16:53:47.723804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 16:53:47.726155 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.727380 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.727408 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.749634 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.764587 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.775926 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.796132 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.808721 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.821410 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:53:47.826886 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 16:54:00.884936 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 16:54:00.884876876 +0000 UTC m=+13.277588958 I0505 16:54:01.670316 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 16:54:01.670296284 +0000 UTC m=+14.063008406 I0505 16:54:01.670482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 16:54:01.670557 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 16:54:01.670547998 +0000 UTC m=+14.063260080 I0505 16:54:01.684890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:54:01.684964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0505 16:54:01.684888 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 16:54:01.685031 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 16:54:01.685023635 +0000 UTC m=+14.077735707 E0505 16:54:01.685074 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 16:54:01.684993 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 16:54:01.684985185 +0000 UTC m=+14.077697257 E0505 16:54:01.692419 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 16:54:01.692531 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 16:54:01.692569 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 16:54:01.692610 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 16:54:01.726314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-68cnn" condition "Approved" to 2026-05-05 16:54:01.726300203 +0000 UTC m=+14.119012295 I0505 16:54:01.739450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-68cnn" condition "Ready" to 2026-05-05 16:54:01.739425288 +0000 UTC m=+14.132137350 I0505 16:54:01.765060 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:54:01.765046348 +0000 UTC m=+14.157758450 I0505 16:54:01.779553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:54:06.694536 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:54:06.694519902 +0000 UTC m=+19.087231974 I0505 16:54:29.216093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 16:54:29.216295 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 16:54:29.216186417 +0000 UTC m=+41.608898489 I0505 16:54:29.216741 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 16:54:29.216041594 +0000 UTC m=+41.608753686 I0505 16:54:29.237735 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 16:54:29.237725456 +0000 UTC m=+41.630437518 I0505 16:54:29.247983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:54:29.248072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 16:54:29.248062451 +0000 UTC m=+41.640774533 I0505 16:54:29.627173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:54:29.663858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8kp5d" condition "Approved" to 2026-05-05 16:54:29.663849384 +0000 UTC m=+42.056561446 I0505 16:54:29.707715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8kp5d" condition "Ready" to 2026-05-05 16:54:29.707705288 +0000 UTC m=+42.100417360 I0505 16:54:29.739686 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:54:29.739674593 +0000 UTC m=+42.132386655 I0505 16:54:29.760811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:58:41.457840 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready" to 2026-05-05 16:58:41.457780323 +0000 UTC m=+293.850492395 I0505 16:58:41.458224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 16:58:41.458239 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Issuing" to 2026-05-05 16:58:41.458234504 +0000 UTC m=+293.850946576 I0505 16:58:41.482258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:58:41.482336 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready" to 2026-05-05 16:58:41.482330097 +0000 UTC m=+293.875042169 I0505 16:58:41.652215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:58:41.697714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-141.nip.io-tls-xtjf2" condition "Approved" to 2026-05-05 16:58:41.697661028 +0000 UTC m=+294.090373130 I0505 16:58:41.756991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-141.nip.io-tls-xtjf2" condition "Ready" to 2026-05-05 16:58:41.756305732 +0000 UTC m=+294.149017834 I0505 16:58:41.823219 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:58:41.823210319 +0000 UTC m=+294.215922391 I0505 16:58:41.860481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:58:41.860916 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:58:41.860910047 +0000 UTC m=+294.253622109 I0505 16:58:41.908668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:59:45.643881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 16:59:45.644143 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 16:59:45.644125013 +0000 UTC m=+358.036837085 I0505 16:59:45.644164 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 16:59:45.643925227 +0000 UTC m=+358.036637329 I0505 16:59:45.658310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:59:45.658390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 16:59:45.658446 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 16:59:45.658434407 +0000 UTC m=+358.051146489 E0505 16:59:45.660057 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 16:59:45.660088 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 16:59:45.660083221 +0000 UTC m=+358.052795283 E0505 16:59:45.660163 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 16:59:45.670624 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 16:59:45.670720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 16:59:45.670752 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 16:59:45.670781 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 16:59:45.719083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcg95" condition "Approved" to 2026-05-05 16:59:45.719072625 +0000 UTC m=+358.111784687 I0505 16:59:45.744651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcg95" condition "Ready" to 2026-05-05 16:59:45.744640552 +0000 UTC m=+358.137352614 I0505 16:59:45.768684 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:59:45.768665936 +0000 UTC m=+358.161378038 I0505 16:59:45.783189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:59:45.783714 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:59:45.78370164 +0000 UTC m=+358.176413732 I0505 16:59:45.795246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:59:45.805454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 16:59:50.671217 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 16:59:50.67114588 +0000 UTC m=+363.063857982 I0505 17:00:29.693327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:29.693391 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 17:00:29.693356293 +0000 UTC m=+402.086068345 I0505 17:00:29.693392 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 17:00:29.693364473 +0000 UTC m=+402.086076545 I0505 17:00:29.693642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:29.693658 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 17:00:29.693655711 +0000 UTC m=+402.086367763 I0505 17:00:29.693671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:29.699257 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 17:00:29.699248047 +0000 UTC m=+402.091960109 I0505 17:00:29.693676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 17:00:29.693671212 +0000 UTC m=+402.086383284 I0505 17:00:29.696166 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 17:00:29.696158921 +0000 UTC m=+402.088871003 I0505 17:00:29.736725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:29.736811 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 17:00:29.736804473 +0000 UTC m=+402.129516535 I0505 17:00:29.737301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:29.737330 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 17:00:29.737327188 +0000 UTC m=+402.130039250 I0505 17:00:29.737705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:29.737764 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 17:00:29.73775956 +0000 UTC m=+402.130471632 I0505 17:00:29.901447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:29.940333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dsc2j" condition "Approved" to 2026-05-05 17:00:29.940324852 +0000 UTC m=+402.333036914 I0505 17:00:29.960087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dsc2j" condition "Ready" to 2026-05-05 17:00:29.960078482 +0000 UTC m=+402.352790544 I0505 17:00:30.023514 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:30.023504739 +0000 UTC m=+402.416216801 I0505 17:00:30.030733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:30.051506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:30.051729 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:30.051723975 +0000 UTC m=+402.444436037 I0505 17:00:30.074045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mfz9b" condition "Approved" to 2026-05-05 17:00:30.074035597 +0000 UTC m=+402.466747659 I0505 17:00:30.078517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:30.082737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:30.089960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mfz9b" condition "Ready" to 2026-05-05 17:00:30.089952821 +0000 UTC m=+402.482664893 I0505 17:00:30.226186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sxwcr" condition "Approved" to 2026-05-05 17:00:30.226173137 +0000 UTC m=+402.618885199 I0505 17:00:30.267989 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:30.267977162 +0000 UTC m=+402.660689224 I0505 17:00:30.326250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sxwcr" condition "Ready" to 2026-05-05 17:00:30.326237846 +0000 UTC m=+402.718949918 I0505 17:00:30.714101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:30.714583 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:30.714576969 +0000 UTC m=+403.107289031 I0505 17:00:31.076507 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:31.076490087 +0000 UTC m=+403.469202189 I0505 17:00:31.142604 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:31.142593941 +0000 UTC m=+403.535306023 I0505 17:00:31.167698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:31.217576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:31.268510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:31.367346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:31.367740 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:31.36773382 +0000 UTC m=+403.760445892 I0505 17:00:31.669105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:31.715152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:38.849246 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" condition "Ready" to 2026-05-05 17:00:38.849202537 +0000 UTC m=+411.241914639 I0505 17:00:38.849851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:38.849886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" condition "Issuing" to 2026-05-05 17:00:38.849878306 +0000 UTC m=+411.242590408 I0505 17:00:38.867816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-28xzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:38.867898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:38.867936 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" condition "Issuing" to 2026-05-05 17:00:38.867911981 +0000 UTC m=+411.260624053 I0505 17:00:39.287625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-28xzv-dgbrm" condition "Approved" to 2026-05-05 17:00:39.287611424 +0000 UTC m=+411.680323496 I0505 17:00:39.288627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-28xzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:39.311509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-28xzv-dgbrm" condition "Ready" to 2026-05-05 17:00:39.311496213 +0000 UTC m=+411.704208305 I0505 17:00:39.346897 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:39.346880165 +0000 UTC m=+411.739592267 I0505 17:00:39.361754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-28xzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:39.362072 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:39.362066371 +0000 UTC m=+411.754778433 I0505 17:00:39.370178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-28xzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:39.386277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-28xzv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-28xzv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:50.138567 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 17:00:50.138191969 +0000 UTC m=+422.530904031 I0505 17:00:50.138889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:00:50.138906 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 17:00:50.138903089 +0000 UTC m=+422.531615151 I0505 17:00:50.181233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:50.181397 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 17:00:50.181387038 +0000 UTC m=+422.574099140 I0505 17:00:50.461775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:50.505932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b229p" condition "Approved" to 2026-05-05 17:00:50.505922486 +0000 UTC m=+422.898634548 I0505 17:00:50.532040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b229p" condition "Ready" to 2026-05-05 17:00:50.532031043 +0000 UTC m=+422.924743105 I0505 17:00:50.578721 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:00:50.57871224 +0000 UTC m=+422.971424292 I0505 17:00:50.601357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:00:50.667805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:05.346766 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 17:04:05.346741689 +0000 UTC m=+617.739453791 I0505 17:04:05.347451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:04:05.347493 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 17:04:05.347483701 +0000 UTC m=+617.740195773 I0505 17:04:05.364065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:05.364146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:04:05.364171 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 17:04:05.364163069 +0000 UTC m=+617.756875131 I0505 17:04:05.700221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hf7lp" condition "Approved" to 2026-05-05 17:04:05.700210683 +0000 UTC m=+618.092922756 I0505 17:04:05.717196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hf7lp" condition "Ready" to 2026-05-05 17:04:05.71718349 +0000 UTC m=+618.109895562 I0505 17:04:05.754819 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:04:05.754806012 +0000 UTC m=+618.147518074 I0505 17:04:05.781745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:05.782206 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:04:05.782198869 +0000 UTC m=+618.174910931 I0505 17:04:05.802121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:05.802697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:46.568941 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 17:04:46.568931805 +0000 UTC m=+658.961643887 I0505 17:04:46.569342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 17:04:46.569393 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 17:04:46.569388118 +0000 UTC m=+658.962100190 I0505 17:04:46.591011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:46.591221 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 17:04:46.591211362 +0000 UTC m=+658.983923464 I0505 17:04:46.966825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:47.001773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8fbpd" condition "Approved" to 2026-05-05 17:04:47.00176045 +0000 UTC m=+659.394472522 I0505 17:04:47.025900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8fbpd" condition "Ready" to 2026-05-05 17:04:47.025885032 +0000 UTC m=+659.418597124 I0505 17:04:47.055453 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:04:47.055443778 +0000 UTC m=+659.448155850 I0505 17:04:47.078933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:47.087487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 17:04:47.088037 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 17:04:47.088027294 +0000 UTC m=+659.480739386