I0515 14:07:59.119823 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 14:07:59.120021 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 14:07:59.120137 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 14:07:59.125961 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 14:07:59.126670 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 14:07:59.126792 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 14:07:59.126802 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 14:07:59.129594 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 14:07:59.142069 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 14:07:59.142347 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 14:07:59.148713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 14:07:59.152501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 14:07:59.154580 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 14:07:59.154603 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 14:07:59.154723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 14:07:59.161031 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 14:07:59.164704 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 14:07:59.168205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 14:07:59.169780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 14:07:59.169953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 14:07:59.171749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 14:07:59.173534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 14:07:59.175853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 14:07:59.180158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 14:07:59.183100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 14:07:59.185986 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 14:07:59.189137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 14:07:59.192169 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 14:07:59.192201 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 14:07:59.192275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 14:07:59.194592 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 14:07:59.197136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 14:07:59.200490 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 14:07:59.205049 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.205399 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.205959 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.206832 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.229541 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.254008 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.258814 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.270513 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.289055 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:07:59.292014 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:08:09.638983 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-15 14:08:09.638951187 +0000 UTC m=+10.561472049 I0515 14:08:10.446012 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 14:08:10.445992549 +0000 UTC m=+11.368513411 I0515 14:08:10.447347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:08:10.447463 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 14:08:10.447450248 +0000 UTC m=+11.369971110 E0515 14:08:10.464727 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:08:10.464805 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-15 14:08:10.464796381 +0000 UTC m=+11.387317223 E0515 14:08:10.464833 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:08:10.465676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:10.465767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:08:10.465790 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 14:08:10.465781863 +0000 UTC m=+11.388302705 E0515 14:08:10.485655 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0515 14:08:10.486858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:08:10.486987 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:08:10.487165 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0515 14:08:10.517134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nwp5w" condition "Approved" to 2026-05-15 14:08:10.51711673 +0000 UTC m=+11.439637612 I0515 14:08:10.533244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nwp5w" condition "Ready" to 2026-05-15 14:08:10.533225093 +0000 UTC m=+11.455745935 I0515 14:08:10.565402 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:10.565375655 +0000 UTC m=+11.487896497 I0515 14:08:10.586004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:10.586585 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:10.586576136 +0000 UTC m=+11.509096978 I0515 14:08:10.601866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:10.607092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:15.486766 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:15.486724149 +0000 UTC m=+16.409244991 I0515 14:08:39.798306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:08:39.798380 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 14:08:39.798344943 +0000 UTC m=+40.720865775 I0515 14:08:39.800220 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 14:08:39.800214839 +0000 UTC m=+40.722735671 I0515 14:08:39.819277 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-15 14:08:39.819266285 +0000 UTC m=+40.741787117 I0515 14:08:39.819983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:39.820057 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 14:08:39.820050247 +0000 UTC m=+40.742571079 I0515 14:08:40.490980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:40.526540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c2vcn" condition "Approved" to 2026-05-15 14:08:40.526530458 +0000 UTC m=+41.449051300 I0515 14:08:40.559558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c2vcn" condition "Ready" to 2026-05-15 14:08:40.559542897 +0000 UTC m=+41.482063759 I0515 14:08:40.586224 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:40.586208155 +0000 UTC m=+41.508729017 I0515 14:08:40.609600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:40.609985 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:40.609978851 +0000 UTC m=+41.532499693 I0515 14:08:40.628020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:40.629193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:08:40.629527 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:08:40.629518101 +0000 UTC m=+41.552038933 I0515 14:08:40.630956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:12:43.434372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-05-15 14:12:43.434329115 +0000 UTC m=+284.356849977 I0515 14:12:43.434845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:12:43.434941 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-05-15 14:12:43.43493169 +0000 UTC m=+284.357452562 I0515 14:12:43.454178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:12:43.454322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:12:43.454358 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-05-15 14:12:43.454341525 +0000 UTC m=+284.376862367 I0515 14:12:43.616146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-s5rrr" condition "Approved" to 2026-05-15 14:12:43.616132012 +0000 UTC m=+284.538652844 I0515 14:12:43.644274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-s5rrr" condition "Ready" to 2026-05-15 14:12:43.644262543 +0000 UTC m=+284.566783375 I0515 14:12:43.671707 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:12:43.671690309 +0000 UTC m=+284.594211151 I0515 14:12:43.694904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:13:49.319081 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 14:13:49.317938194 +0000 UTC m=+350.240459026 I0515 14:13:49.319953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:13:49.319986 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 14:13:49.31997824 +0000 UTC m=+350.242499102 E0515 14:13:49.333652 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:13:49.333707 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-15 14:13:49.333698429 +0000 UTC m=+350.256219271 E0515 14:13:49.333758 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:13:49.334854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:13:49.334939 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 14:13:49.334930748 +0000 UTC m=+350.257451620 E0515 14:13:49.343013 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0515 14:13:49.343454 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:13:49.343512 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:13:49.343568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0515 14:13:49.350982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:13:49.367918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6ncwp" condition "Approved" to 2026-05-15 14:13:49.367904373 +0000 UTC m=+350.290425215 I0515 14:13:49.380362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6ncwp" condition "Ready" to 2026-05-15 14:13:49.380353693 +0000 UTC m=+350.302874535 I0515 14:13:49.401058 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:13:49.401046363 +0000 UTC m=+350.323567205 I0515 14:13:49.413933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:13:54.343950 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:13:54.343936311 +0000 UTC m=+355.266457173 I0515 14:14:34.274872 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 14:14:34.274840519 +0000 UTC m=+395.197361351 I0515 14:14:34.275144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:34.275181 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 14:14:34.275178379 +0000 UTC m=+395.197699211 I0515 14:14:34.285398 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 14:14:34.285383897 +0000 UTC m=+395.207904739 I0515 14:14:34.285805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:34.285879 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 14:14:34.285873122 +0000 UTC m=+395.208393944 I0515 14:14:34.292279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:34.298359 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 14:14:34.298339706 +0000 UTC m=+395.220860538 I0515 14:14:34.294073 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 14:14:34.294057258 +0000 UTC m=+395.216578090 I0515 14:14:34.317406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.317464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:34.317483 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 14:14:34.317478393 +0000 UTC m=+395.239999225 I0515 14:14:34.338544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.338599 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 14:14:34.338593679 +0000 UTC m=+395.261114511 I0515 14:14:34.340889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.340943 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 14:14:34.340935309 +0000 UTC m=+395.263456151 I0515 14:14:34.458058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.480929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.487901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s25nx" condition "Approved" to 2026-05-15 14:14:34.487891514 +0000 UTC m=+395.410412356 I0515 14:14:34.506193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s25nx" condition "Ready" to 2026-05-15 14:14:34.506182855 +0000 UTC m=+395.428703697 I0515 14:14:34.506900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ztfpn" condition "Approved" to 2026-05-15 14:14:34.506893627 +0000 UTC m=+395.429414469 I0515 14:14:34.520921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ztfpn" condition "Ready" to 2026-05-15 14:14:34.520914149 +0000 UTC m=+395.443434981 I0515 14:14:34.582136 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:34.582127562 +0000 UTC m=+395.504648394 I0515 14:14:34.582389 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:34.58238005 +0000 UTC m=+395.504900882 I0515 14:14:34.611296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.611557 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:34.611552328 +0000 UTC m=+395.534073160 I0515 14:14:34.615440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.615785 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:34.615779205 +0000 UTC m=+395.538300037 I0515 14:14:34.865328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.962696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:34.963024 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:34.963015761 +0000 UTC m=+395.885536603 I0515 14:14:35.009560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:35.265247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ws82q" condition "Approved" to 2026-05-15 14:14:35.265144171 +0000 UTC m=+396.187665013 I0515 14:14:35.605442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ws82q" condition "Ready" to 2026-05-15 14:14:35.605429482 +0000 UTC m=+396.527950304 I0515 14:14:35.819594 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:35.819578107 +0000 UTC m=+396.742098939 I0515 14:14:35.912991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:35.913467 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:35.913456536 +0000 UTC m=+396.835977378 I0515 14:14:36.114213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:42.428330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" condition "Ready" to 2026-05-15 14:14:42.428312429 +0000 UTC m=+403.350833281 I0515 14:14:42.428484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:42.428529 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" condition "Issuing" to 2026-05-15 14:14:42.428518655 +0000 UTC m=+403.351039517 I0515 14:14:42.443562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:42.443635 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" condition "Ready" to 2026-05-15 14:14:42.443628275 +0000 UTC m=+403.366149107 I0515 14:14:42.624300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:42.660741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmfvr-64lfm" condition "Approved" to 2026-05-15 14:14:42.660724907 +0000 UTC m=+403.583245749 I0515 14:14:42.684208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmfvr-64lfm" condition "Ready" to 2026-05-15 14:14:42.684195997 +0000 UTC m=+403.606716839 I0515 14:14:42.717098 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:42.71708256 +0000 UTC m=+403.639603402 I0515 14:14:42.740892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmfvr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:56.109406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:56.109439 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 14:14:56.109429385 +0000 UTC m=+417.031950217 I0515 14:14:56.109823 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 14:14:56.109817767 +0000 UTC m=+417.032338599 I0515 14:14:56.132349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:56.132495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:14:56.132529 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 14:14:56.132524069 +0000 UTC m=+417.055044901 I0515 14:14:56.419965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qfljm" condition "Approved" to 2026-05-15 14:14:56.419952316 +0000 UTC m=+417.342473138 I0515 14:14:56.450467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qfljm" condition "Ready" to 2026-05-15 14:14:56.450456714 +0000 UTC m=+417.372977556 I0515 14:14:56.491233 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:56.491216156 +0000 UTC m=+417.413737008 I0515 14:14:56.513318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:56.513762 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:56.513750642 +0000 UTC m=+417.436271484 I0515 14:14:56.531863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:14:56.532097 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:14:56.532090842 +0000 UTC m=+417.454611674 I0515 14:14:56.540638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:08.064426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:18:08.064557 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 14:18:08.064455953 +0000 UTC m=+608.986976805 I0515 14:18:08.064912 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 14:18:08.064880481 +0000 UTC m=+608.987401323 I0515 14:18:08.092744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:08.100352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:18:08.100417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 14:18:08.100407241 +0000 UTC m=+609.022928133 I0515 14:18:08.299763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:08.318658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xnjxb" condition "Approved" to 2026-05-15 14:18:08.318641511 +0000 UTC m=+609.241162383 I0515 14:18:08.342628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xnjxb" condition "Ready" to 2026-05-15 14:18:08.342618871 +0000 UTC m=+609.265139693 I0515 14:18:08.373556 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:18:08.373538251 +0000 UTC m=+609.296059123 I0515 14:18:08.394759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:08.395165 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:18:08.395158729 +0000 UTC m=+609.317679561 I0515 14:18:08.420691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:54.439161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:18:54.439244 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-15 14:18:54.439233761 +0000 UTC m=+655.361754603 I0515 14:18:54.439263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 14:18:54.439246902 +0000 UTC m=+655.361767774 I0515 14:18:54.462004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:54.462166 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 14:18:54.462131525 +0000 UTC m=+655.384652387 I0515 14:18:54.597918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:54.624839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9lkv9" condition "Approved" to 2026-05-15 14:18:54.624827477 +0000 UTC m=+655.547348319 I0515 14:18:54.642455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9lkv9" condition "Ready" to 2026-05-15 14:18:54.642445977 +0000 UTC m=+655.564966819 I0515 14:18:54.675271 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:18:54.67525723 +0000 UTC m=+655.597778072 I0515 14:18:54.694191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:18:54.738773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"