I0526 13:50:28.567814 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0526 13:50:28.567945 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0526 13:50:28.568107 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0526 13:50:28.572042 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0526 13:50:28.572559 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0526 13:50:28.572637 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0526 13:50:28.572670 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0526 13:50:28.575706 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0526 13:50:28.603632 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0526 13:50:28.608210 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0526 13:50:28.608286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0526 13:50:28.613253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0526 13:50:28.618286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0526 13:50:28.622292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0526 13:50:28.624968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0526 13:50:28.626698 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0526 13:50:28.626729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0526 13:50:28.628637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0526 13:50:28.630397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0526 13:50:28.633978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0526 13:50:28.637916 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0526 13:50:28.640595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0526 13:50:28.642992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0526 13:50:28.645530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0526 13:50:28.647873 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0526 13:50:28.647894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0526 13:50:28.648071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0526 13:50:28.650053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0526 13:50:28.651808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0526 13:50:28.653416 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0526 13:50:28.655184 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0526 13:50:28.655205 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0526 13:50:28.655405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0526 13:50:28.660129 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.660604 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.661496 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.661605 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.661764 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.662200 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.662603 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.663461 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.663759 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:28.754401 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0526 13:50:50.451022 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-26 13:50:50.451011594 +0000 UTC m=+21.916009086 I0526 13:50:51.199633 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-26 13:50:51.199617358 +0000 UTC m=+22.664614890 I0526 13:50:51.200287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:50:51.200508 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-26 13:50:51.200497773 +0000 UTC m=+22.665495305 I0526 13:50:51.216306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:50:51.216383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-26 13:50:51.216375872 +0000 UTC m=+22.681373374 E0526 13:50:51.243642 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0526 13:50:51.243733 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-26 13:50:51.243722447 +0000 UTC m=+22.708719969 E0526 13:50:51.243765 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0526 13:50:51.285668 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0526 13:50:51.286250 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0526 13:50:51.286329 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0526 13:50:51.286391 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0526 13:50:51.290849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:50:51.328286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2j52b" condition "Approved" to 2026-05-26 13:50:51.328273874 +0000 UTC m=+22.793271376 I0526 13:50:51.380702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2j52b" condition "Ready" to 2026-05-26 13:50:51.380681339 +0000 UTC m=+22.845678841 I0526 13:50:51.456848 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:50:51.456835389 +0000 UTC m=+22.921832911 I0526 13:50:51.511268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:50:51.511527 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:50:51.511520698 +0000 UTC m=+22.976518190 I0526 13:50:51.518723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:50:51.581090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:50:56.287114 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:50:56.287098716 +0000 UTC m=+27.752096248 I0526 13:51:28.856067 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-26 13:51:28.856011018 +0000 UTC m=+60.321008540 I0526 13:51:28.856802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:51:28.856935 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-26 13:51:28.856917433 +0000 UTC m=+60.321914975 I0526 13:51:29.057749 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-26 13:51:29.057734281 +0000 UTC m=+60.522731783 I0526 13:51:29.061623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:51:29.061770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:51:29.061826 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-26 13:51:29.061810394 +0000 UTC m=+60.526807896 I0526 13:51:31.091368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:51:31.092998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqs47" condition "Approved" to 2026-05-26 13:51:31.092974842 +0000 UTC m=+62.557972394 I0526 13:51:31.127937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqs47" condition "Ready" to 2026-05-26 13:51:31.127919828 +0000 UTC m=+62.592917330 I0526 13:51:31.216864 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:51:31.216841658 +0000 UTC m=+62.681839180 I0526 13:51:31.250535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:51:31.250838 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:51:31.250817038 +0000 UTC m=+62.715814530 I0526 13:51:31.260490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:51:31.296868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:57:02.285626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-05-26 13:57:02.285598354 +0000 UTC m=+393.750595866 I0526 13:57:02.285629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:57:02.285774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-05-26 13:57:02.285768775 +0000 UTC m=+393.750766277 I0526 13:57:02.302032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:57:02.302084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:57:02.302098 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-05-26 13:57:02.302092516 +0000 UTC m=+393.767090018 I0526 13:57:02.566620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-9vpst" condition "Approved" to 2026-05-26 13:57:02.56660478 +0000 UTC m=+394.031602322 I0526 13:57:02.590659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-9vpst" condition "Ready" to 2026-05-26 13:57:02.590646444 +0000 UTC m=+394.055643936 I0526 13:57:02.618092 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:57:02.618081348 +0000 UTC m=+394.083078850 I0526 13:57:02.637459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:57:02.638101 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:57:02.63809061 +0000 UTC m=+394.103088142 I0526 13:57:02.654950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:57:02.655210 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:57:02.655204666 +0000 UTC m=+394.120202158 I0526 13:57:02.659642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:58:07.007033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:58:07.007066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-26 13:58:07.0070598 +0000 UTC m=+458.472057302 I0526 13:58:07.007175 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-26 13:58:07.00715108 +0000 UTC m=+458.472148652 E0526 13:58:07.042548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0526 13:58:07.042595 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-26 13:58:07.042585749 +0000 UTC m=+458.507583251 E0526 13:58:07.042669 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0526 13:58:07.045580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:58:07.045644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:58:07.045658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-26 13:58:07.045653256 +0000 UTC m=+458.510650758 E0526 13:58:07.156781 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0526 13:58:07.156910 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0526 13:58:07.157071 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0526 13:58:07.157816 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0526 13:58:07.452487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qt59m" condition "Approved" to 2026-05-26 13:58:07.452474587 +0000 UTC m=+458.917472079 I0526 13:58:07.453583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:58:07.541923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qt59m" condition "Ready" to 2026-05-26 13:58:07.541911438 +0000 UTC m=+459.006908940 I0526 13:58:07.737956 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:58:07.737938877 +0000 UTC m=+459.202936399 I0526 13:58:07.882664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:58:08.114434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:58:12.157993 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:58:12.157979386 +0000 UTC m=+463.622976918 I0526 13:58:59.479844 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-26 13:58:59.479806608 +0000 UTC m=+510.944804100 I0526 13:58:59.482298 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-26 13:58:59.482288452 +0000 UTC m=+510.947285944 I0526 13:58:59.482396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:58:59.482499 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-26 13:58:59.482491463 +0000 UTC m=+510.947488955 I0526 13:58:59.482522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:58:59.482573 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-26 13:58:59.482568433 +0000 UTC m=+510.947565925 I0526 13:58:59.482773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:58:59.482800 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-26 13:58:59.482796414 +0000 UTC m=+510.947793896 I0526 13:58:59.482966 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-26 13:58:59.482960175 +0000 UTC m=+510.947957677 I0526 13:59:00.029956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:00.030217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:59:00.030283 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-26 13:59:00.030275223 +0000 UTC m=+511.495272725 I0526 13:59:00.033080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:00.033236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:59:00.033316 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-26 13:59:00.03330807 +0000 UTC m=+511.498305592 I0526 13:59:00.038263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:00.038335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:59:00.038358 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-26 13:59:00.038352008 +0000 UTC m=+511.503349500 I0526 13:59:00.596844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6pg9w" condition "Approved" to 2026-05-26 13:59:00.596821869 +0000 UTC m=+512.061819411 I0526 13:59:00.667977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6pg9w" condition "Ready" to 2026-05-26 13:59:00.667966768 +0000 UTC m=+512.132964270 I0526 13:59:00.768356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx4nh" condition "Approved" to 2026-05-26 13:59:00.768343791 +0000 UTC m=+512.233341293 I0526 13:59:00.768667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v4hbj" condition "Approved" to 2026-05-26 13:59:00.768655923 +0000 UTC m=+512.233653415 I0526 13:59:00.903719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v4hbj" condition "Ready" to 2026-05-26 13:59:00.90370884 +0000 UTC m=+512.368706332 I0526 13:59:00.904132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx4nh" condition "Ready" to 2026-05-26 13:59:00.904122292 +0000 UTC m=+512.369119794 I0526 13:59:00.911308 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:00.911299443 +0000 UTC m=+512.376296945 I0526 13:59:01.114788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:01.115015 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:01.115009714 +0000 UTC m=+512.580007196 I0526 13:59:01.193951 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:01.193934707 +0000 UTC m=+512.658932209 I0526 13:59:01.230219 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:01.23020354 +0000 UTC m=+512.695201052 I0526 13:59:01.330642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:01.335162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:01.335887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:01.336780 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:01.336773498 +0000 UTC m=+512.801771000 I0526 13:59:01.541647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:01.680239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:23.182228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:59:23.182345 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" condition "Issuing" to 2026-05-26 13:59:23.182336053 +0000 UTC m=+534.647333565 I0526 13:59:23.182681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" condition "Ready" to 2026-05-26 13:59:23.182675694 +0000 UTC m=+534.647673196 I0526 13:59:23.202260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:23.202387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" condition "Ready" to 2026-05-26 13:59:23.202378925 +0000 UTC m=+534.667376417 I0526 13:59:25.232129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:26.872186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wx7l8-q4fm6" condition "Approved" to 2026-05-26 13:59:26.872172568 +0000 UTC m=+538.337170090 I0526 13:59:27.767193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wx7l8-q4fm6" condition "Ready" to 2026-05-26 13:59:27.767182155 +0000 UTC m=+539.232179667 I0526 13:59:28.442951 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:28.442529571 +0000 UTC m=+539.907527063 I0526 13:59:28.508323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:28.664598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wx7l8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:47.185001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 13:59:47.185044 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-26 13:59:47.18503402 +0000 UTC m=+558.650031542 I0526 13:59:47.185607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-26 13:59:47.185599623 +0000 UTC m=+558.650597155 I0526 13:59:47.207309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:47.207460 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-26 13:59:47.207449125 +0000 UTC m=+558.672446637 I0526 13:59:47.573590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 13:59:47.629872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d9zxs" condition "Approved" to 2026-05-26 13:59:47.629861224 +0000 UTC m=+559.094858726 I0526 13:59:47.664539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d9zxs" condition "Ready" to 2026-05-26 13:59:47.664524228 +0000 UTC m=+559.129521750 I0526 13:59:47.700588 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 13:59:47.7005645 +0000 UTC m=+559.165562002 I0526 13:59:47.725818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:03:13.041176 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-26 14:03:13.041160231 +0000 UTC m=+764.506157733 I0526 14:03:13.041643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 14:03:13.041672 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-26 14:03:13.041665869 +0000 UTC m=+764.506663381 I0526 14:03:13.142531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:03:13.142911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 14:03:13.143115 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-26 14:03:13.143100651 +0000 UTC m=+764.608098213 I0526 14:03:13.709258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:03:13.841941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2jzfz" condition "Approved" to 2026-05-26 14:03:13.841922192 +0000 UTC m=+765.306919674 I0526 14:03:13.915076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2jzfz" condition "Ready" to 2026-05-26 14:03:13.915064015 +0000 UTC m=+765.380061517 I0526 14:03:14.154905 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 14:03:14.154888672 +0000 UTC m=+765.619886194 I0526 14:03:14.438106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:03:14.438964 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 14:03:14.438951126 +0000 UTC m=+765.903948658 I0526 14:03:14.516756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:04:05.994236 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-26 14:04:05.994215952 +0000 UTC m=+817.459213484 I0526 14:04:05.995391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0526 14:04:05.995456 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-26 14:04:05.995448262 +0000 UTC m=+817.460445794 I0526 14:04:06.015522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:04:06.015673 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-26 14:04:06.01566296 +0000 UTC m=+817.480660452 I0526 14:04:06.158431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:04:06.223656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k5f82" condition "Approved" to 2026-05-26 14:04:06.223638148 +0000 UTC m=+817.688635650 I0526 14:04:06.260031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k5f82" condition "Ready" to 2026-05-26 14:04:06.260020845 +0000 UTC m=+817.725018347 I0526 14:04:06.322798 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 14:04:06.322782907 +0000 UTC m=+817.787780409 I0526 14:04:06.357075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0526 14:04:06.357485 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 14:04:06.357478774 +0000 UTC m=+817.822476276 I0526 14:04:06.401265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"