I0507 13:15:30.427297 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0507 13:15:30.427388 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0507 13:15:30.427451 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0507 13:15:30.430689 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0507 13:15:30.431189 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0507 13:15:30.431341 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0507 13:15:30.431459 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0507 13:15:30.433721 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0507 13:15:30.448850 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0507 13:15:30.453082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0507 13:15:30.460060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0507 13:15:30.461908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0507 13:15:30.463694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0507 13:15:30.465448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0507 13:15:30.467174 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0507 13:15:30.468897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0507 13:15:30.470759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0507 13:15:30.474359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0507 13:15:30.477584 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0507 13:15:30.477620 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0507 13:15:30.477633 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0507 13:15:30.477679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0507 13:15:30.480256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0507 13:15:30.482941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0507 13:15:30.485007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0507 13:15:30.486783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0507 13:15:30.488472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0507 13:15:30.490506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0507 13:15:30.491974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0507 13:15:30.495822 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0507 13:15:30.495972 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0507 13:15:30.496050 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0507 13:15:30.496097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0507 13:15:30.500741 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.500951 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.501931 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.502455 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.503138 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.503480 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.503794 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.503512 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.503950 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:30.584624 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 13:15:40.297321 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-07 13:15:40.297294309 +0000 UTC m=+9.900770714 I0507 13:15:40.969150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:15:40.969268 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 13:15:40.969249773 +0000 UTC m=+10.572726158 I0507 13:15:40.969198 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 13:15:40.969187322 +0000 UTC m=+10.572663727 E0507 13:15:40.985104 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:15:40.985191 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-07 13:15:40.985183343 +0000 UTC m=+10.588659718 E0507 13:15:40.985216 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:15:40.986676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:15:40.986727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:15:40.986748 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 13:15:40.986743206 +0000 UTC m=+10.590219581 E0507 13:15:40.995630 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0507 13:15:40.995894 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:15:40.995931 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:15:40.995995 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0507 13:15:41.031861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qlnnm" condition "Approved" to 2026-05-07 13:15:41.031851776 +0000 UTC m=+10.635328151 I0507 13:15:41.045340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qlnnm" condition "Ready" to 2026-05-07 13:15:41.045293732 +0000 UTC m=+10.648770107 I0507 13:15:41.066929 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:15:41.066892102 +0000 UTC m=+10.670368477 I0507 13:15:41.086606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:15:45.996895 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:15:45.996882058 +0000 UTC m=+15.600358453 I0507 13:16:08.159886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:16:08.160040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 13:16:08.16003088 +0000 UTC m=+37.763507255 I0507 13:16:08.159888 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 13:16:08.159830937 +0000 UTC m=+37.763307322 I0507 13:16:08.192139 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-07 13:16:08.192122134 +0000 UTC m=+37.795598509 I0507 13:16:08.201183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:16:08.201284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:16:08.201319 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 13:16:08.201312193 +0000 UTC m=+37.804788568 I0507 13:16:08.455013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g5mqk" condition "Approved" to 2026-05-07 13:16:08.454999895 +0000 UTC m=+38.058476280 I0507 13:16:08.489295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g5mqk" condition "Ready" to 2026-05-07 13:16:08.489279706 +0000 UTC m=+38.092756101 I0507 13:16:08.531603 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:16:08.531571699 +0000 UTC m=+38.135048084 I0507 13:16:08.560780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:16:08.561118 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:16:08.561112608 +0000 UTC m=+38.164588973 I0507 13:16:08.575923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:16:08.576221 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:16:08.576213454 +0000 UTC m=+38.179689819 I0507 13:20:03.858989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-154.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:20:03.859043 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-154.nip.io-tls" condition "Issuing" to 2026-05-07 13:20:03.85903037 +0000 UTC m=+273.462506785 I0507 13:20:03.859116 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-154.nip.io-tls" condition "Ready" to 2026-05-07 13:20:03.859087321 +0000 UTC m=+273.462563726 I0507 13:20:03.880295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-154.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-154.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:20:03.880359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-154.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:20:03.880397 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-154.nip.io-tls" condition "Issuing" to 2026-05-07 13:20:03.88039022 +0000 UTC m=+273.483866605 I0507 13:20:04.044174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-154.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-154.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:20:04.063164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-154.nip.io-tls-j24cl" condition "Approved" to 2026-05-07 13:20:04.063149762 +0000 UTC m=+273.666626167 I0507 13:20:04.089045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-154.nip.io-tls-j24cl" condition "Ready" to 2026-05-07 13:20:04.089036043 +0000 UTC m=+273.692512418 I0507 13:20:04.112447 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-154.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:20:04.112431018 +0000 UTC m=+273.715907423 I0507 13:20:04.130550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-154.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-154.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:20:04.167945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-154.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-154.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:08.438601 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 13:21:08.438545951 +0000 UTC m=+338.042022346 I0507 13:21:08.438686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:08.438879 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 13:21:08.43886543 +0000 UTC m=+338.042341825 E0507 13:21:08.453134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:21:08.453169 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-07 13:21:08.453163849 +0000 UTC m=+338.056640224 E0507 13:21:08.453218 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 13:21:08.455695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:08.455877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:08.455924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 13:21:08.455906708 +0000 UTC m=+338.059383113 E0507 13:21:08.465515 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0507 13:21:08.465953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:21:08.466006 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 13:21:08.466069 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0507 13:21:08.497791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:08.501743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-czf6m" condition "Approved" to 2026-05-07 13:21:08.501726351 +0000 UTC m=+338.105202726 I0507 13:21:08.516988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-czf6m" condition "Ready" to 2026-05-07 13:21:08.516970064 +0000 UTC m=+338.120446459 I0507 13:21:08.540202 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:08.540181258 +0000 UTC m=+338.143657653 I0507 13:21:08.564238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:08.564515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:08.564504309 +0000 UTC m=+338.167980674 I0507 13:21:08.598809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:08.599304 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:08.599291944 +0000 UTC m=+338.202768339 I0507 13:21:08.599819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:13.466533 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:13.466519936 +0000 UTC m=+343.069996341 I0507 13:21:52.305329 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 13:21:52.305313112 +0000 UTC m=+381.908789477 I0507 13:21:52.305652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:52.305668 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 13:21:52.305665361 +0000 UTC m=+381.909141726 I0507 13:21:52.309074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:52.309098 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 13:21:52.309092624 +0000 UTC m=+381.912568999 I0507 13:21:52.309273 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 13:21:52.309268779 +0000 UTC m=+381.912745154 I0507 13:21:52.309512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:52.309532 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 13:21:52.309527936 +0000 UTC m=+381.913004311 I0507 13:21:52.309676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 13:21:52.309672429 +0000 UTC m=+381.913148804 I0507 13:21:52.412571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.415013 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 13:21:52.415005496 +0000 UTC m=+382.018481861 I0507 13:21:52.412285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.418422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:21:52.418558 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 13:21:52.41845662 +0000 UTC m=+382.021932975 I0507 13:21:52.420091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.420137 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 13:21:52.420131961 +0000 UTC m=+382.023608326 I0507 13:21:52.539911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.592796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hcd5p" condition "Approved" to 2026-05-07 13:21:52.592782164 +0000 UTC m=+382.196258549 I0507 13:21:52.594339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.637129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hcd5p" condition "Ready" to 2026-05-07 13:21:52.637117539 +0000 UTC m=+382.240593924 I0507 13:21:52.658917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t26xm" condition "Approved" to 2026-05-07 13:21:52.658907263 +0000 UTC m=+382.262383638 I0507 13:21:52.678725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t26xm" condition "Ready" to 2026-05-07 13:21:52.678715267 +0000 UTC m=+382.282191632 I0507 13:21:52.684778 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:52.684769134 +0000 UTC m=+382.288245509 I0507 13:21:52.759796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.760104 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:52.760097638 +0000 UTC m=+382.363574003 I0507 13:21:52.763794 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:52.763784128 +0000 UTC m=+382.367260493 I0507 13:21:52.801907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.802174 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:52.802168357 +0000 UTC m=+382.405644732 I0507 13:21:52.802334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:52.802488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:53.178722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:53.229740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b6wbm" condition "Approved" to 2026-05-07 13:21:53.229725963 +0000 UTC m=+382.833202338 I0507 13:21:53.382904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b6wbm" condition "Ready" to 2026-05-07 13:21:53.382894518 +0000 UTC m=+382.986370883 I0507 13:21:53.825023 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:53.825008768 +0000 UTC m=+383.428485163 I0507 13:21:53.924788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:53.925276 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:21:53.925266999 +0000 UTC m=+383.528743394 I0507 13:21:54.179400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:21:54.225846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:00.272507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:22:00.273150 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" condition "Issuing" to 2026-05-07 13:22:00.273141912 +0000 UTC m=+389.876618317 I0507 13:22:00.273535 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" condition "Ready" to 2026-05-07 13:22:00.273528971 +0000 UTC m=+389.877005346 I0507 13:22:00.291526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xh47b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:00.291641 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" condition "Ready" to 2026-05-07 13:22:00.291634123 +0000 UTC m=+389.895110488 I0507 13:22:00.513021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xh47b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:00.539818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xh47b-7kml5" condition "Approved" to 2026-05-07 13:22:00.539808019 +0000 UTC m=+390.143284394 I0507 13:22:00.559684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xh47b-7kml5" condition "Ready" to 2026-05-07 13:22:00.559674243 +0000 UTC m=+390.163150618 I0507 13:22:00.582836 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:22:00.582826017 +0000 UTC m=+390.186302392 I0507 13:22:00.603825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xh47b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xh47b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:12.936887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:22:12.936913 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 13:22:12.936906931 +0000 UTC m=+402.540383296 I0507 13:22:12.936942 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 13:22:12.936924121 +0000 UTC m=+402.540400496 I0507 13:22:12.959958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:12.960035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:22:12.960058 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 13:22:12.960050991 +0000 UTC m=+402.563527366 I0507 13:22:13.217289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pzzpp" condition "Approved" to 2026-05-07 13:22:13.217273669 +0000 UTC m=+402.820750074 I0507 13:22:13.242028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pzzpp" condition "Ready" to 2026-05-07 13:22:13.242015807 +0000 UTC m=+402.845492172 I0507 13:22:13.270444 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:22:13.270430646 +0000 UTC m=+402.873907021 I0507 13:22:13.288396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:22:13.348615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:30.147586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:25:30.147630 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 13:25:30.147619906 +0000 UTC m=+599.751096281 I0507 13:25:30.147939 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 13:25:30.147914302 +0000 UTC m=+599.751390697 I0507 13:25:30.169730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:30.169906 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 13:25:30.16989639 +0000 UTC m=+599.773372765 I0507 13:25:30.913291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:30.943862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n8bdd" condition "Approved" to 2026-05-07 13:25:30.943850664 +0000 UTC m=+600.547327039 I0507 13:25:30.963540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n8bdd" condition "Ready" to 2026-05-07 13:25:30.963528149 +0000 UTC m=+600.567004524 I0507 13:25:30.999012 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:25:30.998991227 +0000 UTC m=+600.602467632 I0507 13:25:31.016082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:31.016349 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:25:31.016343307 +0000 UTC m=+600.619819662 I0507 13:25:31.036691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:31.036786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:25:31.037143 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:25:31.037134027 +0000 UTC m=+600.640610403 I0507 13:26:11.518210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:26:11.518282 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 13:26:11.518242631 +0000 UTC m=+641.121718996 I0507 13:26:11.518311 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-07 13:26:11.518290702 +0000 UTC m=+641.121767077 I0507 13:26:11.534707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 13:26:11.534904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 13:26:11.534959 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 13:26:11.534929055 +0000 UTC m=+641.138405420 I0507 13:26:11.855677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r6pgj" condition "Approved" to 2026-05-07 13:26:11.855661237 +0000 UTC m=+641.459137612 I0507 13:26:11.872021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r6pgj" condition "Ready" to 2026-05-07 13:26:11.872007663 +0000 UTC m=+641.475484038 I0507 13:26:11.899409 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 13:26:11.899392552 +0000 UTC m=+641.502868917 I0507 13:26:11.921393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"