I0510 00:48:05.093419 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0510 00:48:05.093542 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0510 00:48:05.093609 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0510 00:48:05.100252 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0510 00:48:05.100723 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0510 00:48:05.100764 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0510 00:48:05.100853 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0510 00:48:05.104099 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0510 00:48:05.120196 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0510 00:48:05.125166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0510 00:48:05.129218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0510 00:48:05.131534 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0510 00:48:05.131560 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0510 00:48:05.131750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0510 00:48:05.134303 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0510 00:48:05.135926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0510 00:48:05.137779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0510 00:48:05.139349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0510 00:48:05.141146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0510 00:48:05.142957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0510 00:48:05.145155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0510 00:48:05.149857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0510 00:48:05.152502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0510 00:48:05.154984 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0510 00:48:05.155147 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0510 00:48:05.155023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0510 00:48:05.157911 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0510 00:48:05.157973 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0510 00:48:05.160648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0510 00:48:05.162462 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0510 00:48:05.162665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0510 00:48:05.164415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0510 00:48:05.167483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0510 00:48:05.170887 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.172974 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.174436 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.190319 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.203632 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.218165 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.230736 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.251577 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.258809 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:05.265692 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0510 00:48:17.224936 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-10 00:48:17.224925511 +0000 UTC m=+12.157160403 I0510 00:48:17.951929 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-10 00:48:17.951909638 +0000 UTC m=+12.884144560 I0510 00:48:17.952221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:48:17.952269 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-10 00:48:17.952263186 +0000 UTC m=+12.884498078 I0510 00:48:17.965755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:17.965846 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-10 00:48:17.965838205 +0000 UTC m=+12.898073097 E0510 00:48:17.971917 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0510 00:48:17.971989 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-10 00:48:17.971981146 +0000 UTC m=+12.904216038 E0510 00:48:17.972017 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0510 00:48:17.980624 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0510 00:48:17.980722 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0510 00:48:17.980761 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0510 00:48:17.980863 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0510 00:48:17.988840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:18.009749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mcz6v" condition "Approved" to 2026-05-10 00:48:18.00973935 +0000 UTC m=+12.941974232 I0510 00:48:18.022189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mcz6v" condition "Ready" to 2026-05-10 00:48:18.022179294 +0000 UTC m=+12.954414186 I0510 00:48:18.045779 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:48:18.045770203 +0000 UTC m=+12.978005095 I0510 00:48:18.062152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:22.981940 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:48:22.98192356 +0000 UTC m=+17.914158452 I0510 00:48:44.982541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:48:44.982677 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-10 00:48:44.982655516 +0000 UTC m=+39.914890438 I0510 00:48:44.983281 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-10 00:48:44.983270857 +0000 UTC m=+39.915505779 I0510 00:48:45.003345 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-10 00:48:45.003328475 +0000 UTC m=+39.935563357 I0510 00:48:45.027743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:45.027805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:48:45.027825 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-10 00:48:45.027820983 +0000 UTC m=+39.960055865 I0510 00:48:45.279159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqffc" condition "Approved" to 2026-05-10 00:48:45.279148705 +0000 UTC m=+40.211383577 I0510 00:48:45.306174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqffc" condition "Ready" to 2026-05-10 00:48:45.30616243 +0000 UTC m=+40.238397322 I0510 00:48:45.343871 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:48:45.34385875 +0000 UTC m=+40.276093642 I0510 00:48:45.368363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:45.368715 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:48:45.368709694 +0000 UTC m=+40.300944576 I0510 00:48:45.394666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:48:45.394936 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:48:45.394929955 +0000 UTC m=+40.327164827 I0510 00:53:05.616407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:53:05.616434 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-10 00:53:05.616428921 +0000 UTC m=+300.548663803 I0510 00:53:05.616784 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-10 00:53:05.61677933 +0000 UTC m=+300.549014212 I0510 00:53:05.637961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:53:05.638562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-10 00:53:05.638553413 +0000 UTC m=+300.570788325 I0510 00:53:05.822964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:53:05.848288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-crkzr" condition "Approved" to 2026-05-10 00:53:05.8482749 +0000 UTC m=+300.780509792 I0510 00:53:05.875589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-crkzr" condition "Ready" to 2026-05-10 00:53:05.875578886 +0000 UTC m=+300.807813769 I0510 00:53:05.897453 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:53:05.897442832 +0000 UTC m=+300.829677724 I0510 00:53:05.917042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:09.959468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:09.959574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-10 00:54:09.959524491 +0000 UTC m=+364.891759413 I0510 00:54:09.959846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-10 00:54:09.959604273 +0000 UTC m=+364.891839185 E0510 00:54:09.972526 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0510 00:54:09.972627 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-10 00:54:09.972617349 +0000 UTC m=+364.904852241 E0510 00:54:09.972740 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0510 00:54:09.973487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:09.973575 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-10 00:54:09.97356924 +0000 UTC m=+364.905804132 E0510 00:54:09.983247 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0510 00:54:09.983446 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0510 00:54:09.983564 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0510 00:54:09.983715 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0510 00:54:09.989100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:10.006640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-65xhr" condition "Approved" to 2026-05-10 00:54:10.006627476 +0000 UTC m=+364.938862368 I0510 00:54:10.017120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-65xhr" condition "Ready" to 2026-05-10 00:54:10.017105246 +0000 UTC m=+364.949340138 I0510 00:54:10.039170 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:10.039155079 +0000 UTC m=+364.971389991 I0510 00:54:10.058030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:10.058330 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:10.058321938 +0000 UTC m=+364.990556850 I0510 00:54:10.080710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:14.984678 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:14.984664124 +0000 UTC m=+369.916899036 I0510 00:54:55.213006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:55.213236 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-10 00:54:55.21322277 +0000 UTC m=+410.145457652 I0510 00:54:55.222669 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-10 00:54:55.213063097 +0000 UTC m=+410.145297979 I0510 00:54:55.222788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:55.222822 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-10 00:54:55.222814633 +0000 UTC m=+410.155049525 I0510 00:54:55.223035 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-10 00:54:55.223031668 +0000 UTC m=+410.155266560 I0510 00:54:55.258172 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-10 00:54:55.258159565 +0000 UTC m=+410.190394447 I0510 00:54:55.261305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:55.261329 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-10 00:54:55.26132167 +0000 UTC m=+410.193556552 I0510 00:54:55.271484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.271809 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-10 00:54:55.271802451 +0000 UTC m=+410.204037333 I0510 00:54:55.323087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.323154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:55.323172 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-10 00:54:55.323167226 +0000 UTC m=+410.255402098 I0510 00:54:55.327518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.327587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:54:55.327611 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-10 00:54:55.327605535 +0000 UTC m=+410.259840417 I0510 00:54:55.485583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.505752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m98vm" condition "Approved" to 2026-05-10 00:54:55.505736965 +0000 UTC m=+410.437971877 I0510 00:54:55.531966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m98vm" condition "Ready" to 2026-05-10 00:54:55.531948802 +0000 UTC m=+410.464183704 I0510 00:54:55.592516 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:55.592508063 +0000 UTC m=+410.524742945 I0510 00:54:55.604807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.605147 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:55.605142728 +0000 UTC m=+410.537377610 I0510 00:54:55.625814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kxkqr" condition "Approved" to 2026-05-10 00:54:55.625805184 +0000 UTC m=+410.558040066 I0510 00:54:55.647166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.654698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kxkqr" condition "Ready" to 2026-05-10 00:54:55.654688957 +0000 UTC m=+410.586923839 I0510 00:54:55.671853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.700816 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:55.700802945 +0000 UTC m=+410.633037827 I0510 00:54:55.748652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qsv5r" condition "Approved" to 2026-05-10 00:54:55.748633449 +0000 UTC m=+410.680868341 I0510 00:54:55.834513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:55.836205 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:55.836195384 +0000 UTC m=+410.768430276 I0510 00:54:56.145084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qsv5r" condition "Ready" to 2026-05-10 00:54:56.145067653 +0000 UTC m=+411.077302565 E0510 00:54:56.382213 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-h7v2w\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0510 00:54:56.593200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:56.688875 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:56.688854553 +0000 UTC m=+411.621089465 I0510 00:54:56.882433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:56.899160 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:54:56.899145593 +0000 UTC m=+411.831380505 I0510 00:54:56.988988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:57.136639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:54:57.186566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:55:04.482238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-994tx-tls" condition "Ready" to 2026-05-10 00:55:04.482203809 +0000 UTC m=+419.414438701 I0510 00:55:04.482505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-994tx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:55:04.482573 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-994tx-tls" condition "Issuing" to 2026-05-10 00:55:04.482555855 +0000 UTC m=+419.414790747 I0510 00:55:04.495842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-994tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-994tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:55:04.495917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-994tx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:55:04.495947 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-994tx-tls" condition "Issuing" to 2026-05-10 00:55:04.495941121 +0000 UTC m=+419.428176003 I0510 00:55:04.883851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-994tx-bbfq2" condition "Approved" to 2026-05-10 00:55:04.883837617 +0000 UTC m=+419.816072509 I0510 00:55:04.913668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-994tx-bbfq2" condition "Ready" to 2026-05-10 00:55:04.91365089 +0000 UTC m=+419.845885812 I0510 00:55:05.026811 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-994tx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:55:05.026801827 +0000 UTC m=+419.959036709 I0510 00:55:05.056602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-994tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-994tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:55:20.369872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:55:20.369911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-10 00:55:20.369901346 +0000 UTC m=+435.302136268 I0510 00:55:20.370098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-10 00:55:20.370080529 +0000 UTC m=+435.302315421 I0510 00:55:20.399404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:55:20.400924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:55:20.400964 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-10 00:55:20.400955669 +0000 UTC m=+435.333190561 I0510 00:55:20.701085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d99l4" condition "Approved" to 2026-05-10 00:55:20.701070643 +0000 UTC m=+435.633305545 I0510 00:55:20.724708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d99l4" condition "Ready" to 2026-05-10 00:55:20.724690291 +0000 UTC m=+435.656925183 I0510 00:55:20.754638 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:55:20.754627462 +0000 UTC m=+435.686862344 I0510 00:55:20.776124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:58:39.101691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:58:39.101721 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-10 00:58:39.101696633 +0000 UTC m=+634.033931525 I0510 00:58:39.101770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-10 00:58:39.101760004 +0000 UTC m=+634.033994926 I0510 00:58:39.118065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:58:39.118115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:58:39.118128 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-10 00:58:39.118122718 +0000 UTC m=+634.050357600 I0510 00:58:39.308663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ddqrq" condition "Approved" to 2026-05-10 00:58:39.308652208 +0000 UTC m=+634.240887100 I0510 00:58:39.328201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ddqrq" condition "Ready" to 2026-05-10 00:58:39.328191705 +0000 UTC m=+634.260426587 I0510 00:58:39.361278 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:58:39.361263347 +0000 UTC m=+634.293498239 I0510 00:58:39.383801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:58:39.384070 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:58:39.384065178 +0000 UTC m=+634.316300060 I0510 00:58:39.402499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:58:39.402918 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:58:39.402907811 +0000 UTC m=+634.335142703 I0510 00:59:19.360135 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-10 00:59:19.360123289 +0000 UTC m=+674.292358181 I0510 00:59:19.360572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:59:19.360778 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-10 00:59:19.360748259 +0000 UTC m=+674.292983171 I0510 00:59:19.385823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:59:19.386093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0510 00:59:19.386125 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-10 00:59:19.386118687 +0000 UTC m=+674.318353579 I0510 00:59:20.184430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dhrs9" condition "Approved" to 2026-05-10 00:59:20.184413386 +0000 UTC m=+675.116648308 I0510 00:59:20.203353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dhrs9" condition "Ready" to 2026-05-10 00:59:20.203344229 +0000 UTC m=+675.135579101 I0510 00:59:20.230274 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:59:20.230263343 +0000 UTC m=+675.162498235 I0510 00:59:20.250236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0510 00:59:20.250775 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-10 00:59:20.250767061 +0000 UTC m=+675.183001953 I0510 00:59:20.274901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"