I0519 17:51:39.142640 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0519 17:51:39.142838 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0519 17:51:39.142946 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0519 17:51:39.149271 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0519 17:51:39.149691 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0519 17:51:39.149853 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0519 17:51:39.150012 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0519 17:51:39.152328 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0519 17:51:39.163492 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0519 17:51:39.169025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0519 17:51:39.177206 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0519 17:51:39.177515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0519 17:51:39.180439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0519 17:51:39.183079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0519 17:51:39.185337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0519 17:51:39.187608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0519 17:51:39.189517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0519 17:51:39.191275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0519 17:51:39.196414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0519 17:51:39.198804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0519 17:51:39.201111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0519 17:51:39.201160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0519 17:51:39.203741 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0519 17:51:39.203868 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0519 17:51:39.203798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0519 17:51:39.206145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0519 17:51:39.208160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0519 17:51:39.209721 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0519 17:51:39.209773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0519 17:51:39.211738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0519 17:51:39.213450 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0519 17:51:39.213544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0519 17:51:39.220370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0519 17:51:39.221858 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.222046 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.223305 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.223925 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.224370 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.224819 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.228801 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.229011 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.229255 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:39.303564 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:51:54.824745 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 17:51:54.824712979 +0000 UTC m=+15.713648212 I0519 17:51:55.512810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:51:55.512849 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 17:51:55.5128422 +0000 UTC m=+16.401777433 I0519 17:51:55.512918 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 17:51:55.51287102 +0000 UTC m=+16.401806273 I0519 17:51:55.535789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:51:55.535873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:51:55.535894 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 17:51:55.535886664 +0000 UTC m=+16.424821907 E0519 17:51:55.543466 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 17:51:55.543525 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 17:51:55.543518416 +0000 UTC m=+16.432453649 E0519 17:51:55.543545 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:51:55.560938 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0519 17:51:55.562777 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:51:55.562852 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:51:55.562884 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 17:51:55.585424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:51:55.590590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nd8v2" condition "Approved" to 2026-05-19 17:51:55.590562391 +0000 UTC m=+16.479497624 I0519 17:51:55.605412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nd8v2" condition "Ready" to 2026-05-19 17:51:55.605399215 +0000 UTC m=+16.494334448 I0519 17:51:55.636401 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:51:55.636391296 +0000 UTC m=+16.525326519 I0519 17:51:55.655583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:51:55.695097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:52:00.562169 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:52:00.562159567 +0000 UTC m=+21.451094800 I0519 17:52:24.277602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:52:24.277662 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 17:52:24.277654672 +0000 UTC m=+45.166589895 I0519 17:52:24.277851 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 17:52:24.277845374 +0000 UTC m=+45.166780597 I0519 17:52:24.299608 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 17:52:24.299585413 +0000 UTC m=+45.188520646 I0519 17:52:24.316799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:52:24.316901 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 17:52:24.316894305 +0000 UTC m=+45.205829538 I0519 17:52:24.538378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:52:24.573128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q8zhd" condition "Approved" to 2026-05-19 17:52:24.573118574 +0000 UTC m=+45.462053807 I0519 17:52:24.607884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q8zhd" condition "Ready" to 2026-05-19 17:52:24.607872151 +0000 UTC m=+45.496807384 I0519 17:52:24.668312 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:52:24.668191745 +0000 UTC m=+45.557127008 I0519 17:52:24.692061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:52:24.692380 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:52:24.692374635 +0000 UTC m=+45.581309858 I0519 17:52:24.711556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:58:49.260886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:58:49.260969 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Issuing" to 2026-05-19 17:58:49.260959575 +0000 UTC m=+430.149894828 I0519 17:58:49.261173 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready" to 2026-05-19 17:58:49.261145477 +0000 UTC m=+430.150080740 I0519 17:58:49.323376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:58:49.323785 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready" to 2026-05-19 17:58:49.323771701 +0000 UTC m=+430.212707014 I0519 17:58:49.577305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:58:49.653489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-205.nip.io-tls-rplpn" condition "Approved" to 2026-05-19 17:58:49.653479718 +0000 UTC m=+430.542414941 I0519 17:58:49.695097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-205.nip.io-tls-rplpn" condition "Ready" to 2026-05-19 17:58:49.695080878 +0000 UTC m=+430.584016141 I0519 17:58:49.725741 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:58:49.725725996 +0000 UTC m=+430.614661229 I0519 17:58:49.752072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:58:49.752343 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:58:49.752338927 +0000 UTC m=+430.641274140 I0519 17:58:49.764779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:58:49.765324 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:58:49.765315797 +0000 UTC m=+430.654251040 I0519 17:59:53.040118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 17:59:53.040098625 +0000 UTC m=+493.929033878 I0519 17:59:53.040349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:59:53.040479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 17:59:53.040430799 +0000 UTC m=+493.929366052 E0519 17:59:53.086181 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 17:59:53.086229 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 17:59:53.086221003 +0000 UTC m=+493.975156236 E0519 17:59:53.086280 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 17:59:53.090334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:53.090620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 17:59:53.090605187 +0000 UTC m=+493.979540440 E0519 17:59:53.136968 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0519 17:59:53.137086 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:59:53.137137 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:59:53.137381 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0519 17:59:53.141450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:53.141564 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 17:59:53.141555133 +0000 UTC m=+494.030490376 I0519 17:59:53.164154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bjrpq" condition "Approved" to 2026-05-19 17:59:53.164136877 +0000 UTC m=+494.053072130 I0519 17:59:53.167029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 17:59:53.167007671 +0000 UTC m=+494.055942934 I0519 17:59:53.300805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:53.302888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bjrpq" condition "Ready" to 2026-05-19 17:59:53.302865565 +0000 UTC m=+494.191800838 I0519 17:59:53.595476 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:53.595459627 +0000 UTC m=+494.484394890 I0519 17:59:53.685639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:54.246231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:58.138160 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:58.138145507 +0000 UTC m=+499.027080760 I0519 18:00:49.394005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:00:49.394181 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 18:00:49.394170513 +0000 UTC m=+550.283105746 I0519 18:00:49.394782 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 18:00:49.39477457 +0000 UTC m=+550.283709813 I0519 18:00:49.396129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:00:49.396179 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 18:00:49.396175145 +0000 UTC m=+550.285110358 I0519 18:00:49.396397 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 18:00:49.396393428 +0000 UTC m=+550.285328651 I0519 18:00:49.415343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:00:49.415523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 18:00:49.41551367 +0000 UTC m=+550.304448893 I0519 18:00:49.415754 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 18:00:49.415740212 +0000 UTC m=+550.304675435 I0519 18:00:49.476989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:49.477068 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 18:00:49.477060503 +0000 UTC m=+550.365995736 I0519 18:00:49.477449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:49.478478 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 18:00:49.478460499 +0000 UTC m=+550.367395752 I0519 18:00:49.481792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:49.481882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:00:49.481995 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 18:00:49.481904047 +0000 UTC m=+550.370839270 I0519 18:00:49.856581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:49.876541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:49.937189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sm6zx" condition "Approved" to 2026-05-19 18:00:49.93715281 +0000 UTC m=+550.826088073 I0519 18:00:49.937866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gp6nr" condition "Approved" to 2026-05-19 18:00:49.937854529 +0000 UTC m=+550.826789772 I0519 18:00:49.957805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjdvm" condition "Approved" to 2026-05-19 18:00:49.95778898 +0000 UTC m=+550.846724213 I0519 18:00:49.970275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sm6zx" condition "Ready" to 2026-05-19 18:00:49.970263438 +0000 UTC m=+550.859198671 I0519 18:00:49.970702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gp6nr" condition "Ready" to 2026-05-19 18:00:49.970682282 +0000 UTC m=+550.859617555 I0519 18:00:49.975381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjdvm" condition "Ready" to 2026-05-19 18:00:49.975368795 +0000 UTC m=+550.864304028 I0519 18:00:50.008178 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:00:50.008164309 +0000 UTC m=+550.897099542 I0519 18:00:50.127554 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:00:50.127526142 +0000 UTC m=+551.016461395 I0519 18:00:50.220417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:50.220790 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:00:50.220781396 +0000 UTC m=+551.109716629 I0519 18:00:50.264860 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:00:50.264851334 +0000 UTC m=+551.153786567 I0519 18:00:50.352528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:50.587377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:50.588935 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:00:50.588924207 +0000 UTC m=+551.477859440 I0519 18:00:50.687153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:00:51.008582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:12.924898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" condition "Ready" to 2026-05-19 18:01:12.924882964 +0000 UTC m=+573.813818197 I0519 18:01:12.925334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:01:12.925357 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" condition "Issuing" to 2026-05-19 18:01:12.925350469 +0000 UTC m=+573.814285702 I0519 18:01:12.940922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fpntj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:12.941120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" condition "Ready" to 2026-05-19 18:01:12.941110859 +0000 UTC m=+573.830046122 I0519 18:01:13.280532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fpntj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:13.316963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fpntj-bz757" condition "Approved" to 2026-05-19 18:01:13.316940795 +0000 UTC m=+574.205876058 I0519 18:01:13.342935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fpntj-bz757" condition "Ready" to 2026-05-19 18:01:13.342920495 +0000 UTC m=+574.231855748 I0519 18:01:13.409935 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:01:13.409920458 +0000 UTC m=+574.298855681 I0519 18:01:13.450011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fpntj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fpntj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:45.531791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 18:01:45.531742056 +0000 UTC m=+606.420677289 I0519 18:01:45.531940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:01:45.531984 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 18:01:45.531970228 +0000 UTC m=+606.420905451 I0519 18:01:45.570180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:45.570295 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 18:01:45.570286129 +0000 UTC m=+606.459221362 I0519 18:01:45.775024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:45.818533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6h4k6" condition "Approved" to 2026-05-19 18:01:45.818512824 +0000 UTC m=+606.707448037 I0519 18:01:45.849052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6h4k6" condition "Ready" to 2026-05-19 18:01:45.849038033 +0000 UTC m=+606.737973266 I0519 18:01:45.889684 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:01:45.889669888 +0000 UTC m=+606.778605111 I0519 18:01:45.911139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:01:45.911532 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:01:45.911522887 +0000 UTC m=+606.800458120 I0519 18:01:45.936341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:04:41.490295 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 18:04:41.490278431 +0000 UTC m=+782.379213664 I0519 18:04:41.490372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:04:41.490404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 18:04:41.490394354 +0000 UTC m=+782.379329617 I0519 18:04:41.511140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:04:41.511353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:04:41.511401 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 18:04:41.511389597 +0000 UTC m=+782.400324860 I0519 18:04:41.713394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-df77r" condition "Approved" to 2026-05-19 18:04:41.713383398 +0000 UTC m=+782.602318611 I0519 18:04:41.731605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-df77r" condition "Ready" to 2026-05-19 18:04:41.731596829 +0000 UTC m=+782.620532052 I0519 18:04:41.764750 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:04:41.764738913 +0000 UTC m=+782.653674146 I0519 18:04:41.786942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:04:41.787303 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:04:41.787297917 +0000 UTC m=+782.676233130 I0519 18:04:41.804483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:04:41.807113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:04:41.807552 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:04:41.807543855 +0000 UTC m=+782.696479088 I0519 18:05:21.789768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:05:21.789828 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-19 18:05:21.789821992 +0000 UTC m=+822.678757215 I0519 18:05:21.789799 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-19 18:05:21.789787321 +0000 UTC m=+822.678722554 I0519 18:05:21.808032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:21.808083 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-19 18:05:21.808077961 +0000 UTC m=+822.697013184 I0519 18:05:21.921609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:21.958157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-48z2s" condition "Approved" to 2026-05-19 18:05:21.95814884 +0000 UTC m=+822.847084063 I0519 18:05:21.986516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-48z2s" condition "Ready" to 2026-05-19 18:05:21.986507342 +0000 UTC m=+822.875442565 I0519 18:05:22.048574 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:22.048555063 +0000 UTC m=+822.937490286 I0519 18:05:22.085259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:22.085281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:22.085626 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:22.085621785 +0000 UTC m=+822.974557008 I0519 18:05:22.099707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:22.100053 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:22.100046738 +0000 UTC m=+822.988981961 I0519 18:05:22.102570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"