I0515 08:08:53.156090 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 08:08:53.156199 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 08:08:53.156275 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 08:08:53.161706 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 08:08:53.162153 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 08:08:53.162205 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 08:08:53.162268 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 08:08:53.166832 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 08:08:53.180469 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 08:08:53.185022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 08:08:53.187741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 08:08:53.192015 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 08:08:53.192045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 08:08:53.197058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 08:08:53.201265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 08:08:53.204201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 08:08:53.205867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 08:08:53.207904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 08:08:53.209666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 08:08:53.214427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 08:08:53.218889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 08:08:53.221696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 08:08:53.224222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 08:08:53.226672 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 08:08:53.226693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 08:08:53.226702 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 08:08:53.226710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 08:08:53.226718 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 08:08:53.226750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 08:08:53.229162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 08:08:53.231649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 08:08:53.233969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 08:08:53.235781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 08:08:53.239787 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.240979 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.242364 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.242370 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.255856 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.270987 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.283874 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.299499 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.323715 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:08:53.323841 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 08:09:06.811890 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-15 08:09:06.811878481 +0000 UTC m=+13.688039252 I0515 08:09:07.519076 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 08:09:07.519063077 +0000 UTC m=+14.395223848 I0515 08:09:07.519482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:09:07.519529 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 08:09:07.519523249 +0000 UTC m=+14.395684030 E0515 08:09:07.535091 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 08:09:07.535157 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-15 08:09:07.535149971 +0000 UTC m=+14.411310742 E0515 08:09:07.535475 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 08:09:07.538581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:07.538750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:09:07.538861 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 08:09:07.53885268 +0000 UTC m=+14.415013451 E0515 08:09:07.547803 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0515 08:09:07.548022 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 08:09:07.548129 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 08:09:07.548312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0515 08:09:07.575636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:07.580619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tkmld" condition "Approved" to 2026-05-15 08:09:07.580612121 +0000 UTC m=+14.456772882 I0515 08:09:07.593146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tkmld" condition "Ready" to 2026-05-15 08:09:07.593136353 +0000 UTC m=+14.469297134 I0515 08:09:07.617354 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:09:07.617339599 +0000 UTC m=+14.493500400 I0515 08:09:07.635519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:07.635842 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:09:07.635836429 +0000 UTC m=+14.511997200 I0515 08:09:07.649264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:07.650489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:12.548325 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:09:12.54827523 +0000 UTC m=+19.424436031 I0515 08:09:36.941022 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 08:09:36.941005621 +0000 UTC m=+43.817166382 I0515 08:09:36.941389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:09:36.941409 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 08:09:36.941404992 +0000 UTC m=+43.817565763 I0515 08:09:36.957785 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-15 08:09:36.957632754 +0000 UTC m=+43.833793525 I0515 08:09:36.980966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:36.981025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:09:36.981045 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 08:09:36.981040852 +0000 UTC m=+43.857201613 I0515 08:09:37.148588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qjdgt" condition "Approved" to 2026-05-15 08:09:37.148570517 +0000 UTC m=+44.024731338 I0515 08:09:37.188596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qjdgt" condition "Ready" to 2026-05-15 08:09:37.18858361 +0000 UTC m=+44.064744381 I0515 08:09:37.222407 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:09:37.222391285 +0000 UTC m=+44.098552046 I0515 08:09:37.244691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:09:37.245093 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:09:37.245083789 +0000 UTC m=+44.121244580 I0515 08:09:37.269549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:13:39.108974 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready" to 2026-05-15 08:13:39.108956949 +0000 UTC m=+285.985117750 I0515 08:13:39.109139 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:13:39.109229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Issuing" to 2026-05-15 08:13:39.109216337 +0000 UTC m=+285.985377178 I0515 08:13:39.126476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:13:39.126674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:13:39.126796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Issuing" to 2026-05-15 08:13:39.126695049 +0000 UTC m=+286.002948302 I0515 08:13:39.283929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:13:39.292023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-2w68d" condition "Approved" to 2026-05-15 08:13:39.291999106 +0000 UTC m=+286.168159877 I0515 08:13:39.318628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-2w68d" condition "Ready" to 2026-05-15 08:13:39.318614054 +0000 UTC m=+286.194774845 I0515 08:13:39.343445 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:13:39.343434436 +0000 UTC m=+286.219595197 I0515 08:13:39.364790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:14:43.066379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:14:43.066422 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 08:14:43.066414067 +0000 UTC m=+349.942574838 I0515 08:14:43.066859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 08:14:43.066853684 +0000 UTC m=+349.943014455 E0515 08:14:43.080240 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 08:14:43.081291 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-15 08:14:43.081279158 +0000 UTC m=+349.957439939 E0515 08:14:43.081466 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 08:14:43.083410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:14:43.083484 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 08:14:43.083476264 +0000 UTC m=+349.959637035 E0515 08:14:43.095727 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0515 08:14:43.096179 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 08:14:43.096216 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 08:14:43.096281 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0515 08:14:43.098431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:14:43.118141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbpkr" condition "Approved" to 2026-05-15 08:14:43.118125675 +0000 UTC m=+349.994286446 I0515 08:14:43.131039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbpkr" condition "Ready" to 2026-05-15 08:14:43.131020221 +0000 UTC m=+350.007181022 I0515 08:14:43.151806 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:14:43.1517975 +0000 UTC m=+350.027958271 I0515 08:14:43.171063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:14:43.171331 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:14:43.17132143 +0000 UTC m=+350.047482201 I0515 08:14:43.183707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:14:48.096274 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:14:48.096254402 +0000 UTC m=+354.972415203 I0515 08:15:26.528533 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 08:15:26.528523235 +0000 UTC m=+393.404683996 I0515 08:15:26.531568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:26.531633 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 08:15:26.531614924 +0000 UTC m=+393.407775685 I0515 08:15:26.542106 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 08:15:26.542090108 +0000 UTC m=+393.418250879 I0515 08:15:26.542479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:26.542504 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 08:15:26.542500355 +0000 UTC m=+393.418661116 I0515 08:15:26.542907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 08:15:26.542902472 +0000 UTC m=+393.419063233 I0515 08:15:26.543169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:26.543189 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 08:15:26.543185513 +0000 UTC m=+393.419346274 I0515 08:15:26.564269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.564544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:26.564573 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 08:15:26.564566971 +0000 UTC m=+393.440727742 I0515 08:15:26.577588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.577661 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 08:15:26.577653093 +0000 UTC m=+393.453813864 I0515 08:15:26.579278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.579473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:26.579510 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 08:15:26.579506931 +0000 UTC m=+393.455667692 I0515 08:15:26.698603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.704984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x4q92" condition "Approved" to 2026-05-15 08:15:26.704969937 +0000 UTC m=+393.581130708 I0515 08:15:26.717370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcwfw" condition "Approved" to 2026-05-15 08:15:26.717360191 +0000 UTC m=+393.593520952 I0515 08:15:26.720374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x4q92" condition "Ready" to 2026-05-15 08:15:26.720368546 +0000 UTC m=+393.596529307 I0515 08:15:26.735300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcwfw" condition "Ready" to 2026-05-15 08:15:26.735287054 +0000 UTC m=+393.611447855 I0515 08:15:26.746976 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:26.746965979 +0000 UTC m=+393.623126750 I0515 08:15:26.763469 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:26.763457834 +0000 UTC m=+393.639618635 I0515 08:15:26.770414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.804522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:26.804825 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:26.80482051 +0000 UTC m=+393.680981271 I0515 08:15:26.959375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:27.214288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:27.304575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:27.581744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q25km" condition "Approved" to 2026-05-15 08:15:27.581736189 +0000 UTC m=+394.457896950 I0515 08:15:27.618343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q25km" condition "Ready" to 2026-05-15 08:15:27.618331459 +0000 UTC m=+394.494492220 I0515 08:15:28.062660 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:28.062644244 +0000 UTC m=+394.938805025 I0515 08:15:28.158151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:28.158594 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:28.158583256 +0000 UTC m=+395.034744047 I0515 08:15:28.410540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:28.455272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:34.111354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Ready" to 2026-05-15 08:15:34.111318241 +0000 UTC m=+400.987479002 I0515 08:15:34.111411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:34.111425 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Issuing" to 2026-05-15 08:15:34.111422076 +0000 UTC m=+400.987582827 I0515 08:15:34.126103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:34.126182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Ready" to 2026-05-15 08:15:34.126173934 +0000 UTC m=+401.002334705 I0515 08:15:34.391715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:34.426589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q2dpm-vhdhz" condition "Approved" to 2026-05-15 08:15:34.426577548 +0000 UTC m=+401.302738319 I0515 08:15:34.546342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q2dpm-vhdhz" condition "Ready" to 2026-05-15 08:15:34.546329752 +0000 UTC m=+401.422490543 I0515 08:15:34.574716 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:34.574700452 +0000 UTC m=+401.450861223 I0515 08:15:34.592275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:34.592638 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:34.592606593 +0000 UTC m=+401.468767364 I0515 08:15:34.608238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:34.608980 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q2dpm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:34.608949869 +0000 UTC m=+401.485110640 I0515 08:15:47.460774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:15:47.460866 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 08:15:47.460857396 +0000 UTC m=+414.337018147 I0515 08:15:47.461095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 08:15:47.461080025 +0000 UTC m=+414.337240796 I0515 08:15:47.483916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:47.483994 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 08:15:47.483988171 +0000 UTC m=+414.360148932 I0515 08:15:47.700489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:47.737024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5t9bq" condition "Approved" to 2026-05-15 08:15:47.737014412 +0000 UTC m=+414.613175173 I0515 08:15:47.756580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5t9bq" condition "Ready" to 2026-05-15 08:15:47.756570206 +0000 UTC m=+414.632730987 I0515 08:15:47.786828 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:47.786750633 +0000 UTC m=+414.662911434 I0515 08:15:47.816260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:15:47.816579 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:15:47.816571064 +0000 UTC m=+414.692731835 I0515 08:15:47.833088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:18:57.124971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:18:57.125566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 08:18:57.12555652 +0000 UTC m=+604.001717311 I0515 08:18:57.125783 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 08:18:57.12576893 +0000 UTC m=+604.001929701 I0515 08:18:57.143375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:18:57.143444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 08:18:57.143438082 +0000 UTC m=+604.019598833 I0515 08:18:57.261229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:18:57.288875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dd2hj" condition "Approved" to 2026-05-15 08:18:57.28886368 +0000 UTC m=+604.165024451 I0515 08:18:57.309336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dd2hj" condition "Ready" to 2026-05-15 08:18:57.309325795 +0000 UTC m=+604.185486556 I0515 08:18:57.336924 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:18:57.336908069 +0000 UTC m=+604.213068840 I0515 08:18:57.355910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:18:57.356363 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:18:57.356356105 +0000 UTC m=+604.232516866 I0515 08:18:57.376737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:19:38.377383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 08:19:38.377434 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-15 08:19:38.377426849 +0000 UTC m=+645.253587620 I0515 08:19:38.377661 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 08:19:38.377628579 +0000 UTC m=+645.253789340 I0515 08:19:38.393984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:19:38.394057 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 08:19:38.394046834 +0000 UTC m=+645.270207625 I0515 08:19:38.666379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:19:38.695897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mjs6z" condition "Approved" to 2026-05-15 08:19:38.695878222 +0000 UTC m=+645.572039003 I0515 08:19:38.711725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mjs6z" condition "Ready" to 2026-05-15 08:19:38.711714528 +0000 UTC m=+645.587875299 I0515 08:19:38.737034 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:19:38.737022538 +0000 UTC m=+645.613183309 I0515 08:19:38.760357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:19:38.762183 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:19:38.762171958 +0000 UTC m=+645.638332729 I0515 08:19:38.788469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 08:19:38.788742 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 08:19:38.788735108 +0000 UTC m=+645.664895869