I0504 15:30:09.296095 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0504 15:30:09.296460 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0504 15:30:09.296673 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0504 15:30:09.301414 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0504 15:30:09.301865 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0504 15:30:09.301952 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0504 15:30:09.302025 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0504 15:30:09.305161 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0504 15:30:09.319276 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0504 15:30:09.322838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0504 15:30:09.329019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0504 15:30:09.329650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0504 15:30:09.331779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0504 15:30:09.334259 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0504 15:30:09.334434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0504 15:30:09.336720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0504 15:30:09.338403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0504 15:30:09.340290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0504 15:30:09.342578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0504 15:30:09.348996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0504 15:30:09.351715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0504 15:30:09.354284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0504 15:30:09.357302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0504 15:30:09.359879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0504 15:30:09.362174 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0504 15:30:09.366274 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0504 15:30:09.366312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0504 15:30:09.366331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0504 15:30:09.366394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0504 15:30:09.369335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0504 15:30:09.375231 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0504 15:30:09.375333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0504 15:30:09.378353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0504 15:30:09.381241 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.381749 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.381991 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.401196 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.415853 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.426313 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.440629 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.458626 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.465439 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:09.469647 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 15:30:23.939891 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-04 15:30:23.939874253 +0000 UTC m=+14.684400341 I0504 15:30:24.759268 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 15:30:24.75924556 +0000 UTC m=+15.503771678 I0504 15:30:24.759947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:30:24.760110 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 15:30:24.760099774 +0000 UTC m=+15.504625882 I0504 15:30:24.783916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:30:24.784086 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 15:30:24.784052385 +0000 UTC m=+15.528578473 E0504 15:30:24.810638 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 15:30:24.810762 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-04 15:30:24.810750453 +0000 UTC m=+15.555276571 E0504 15:30:24.810797 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 15:30:24.852022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0504 15:30:24.852568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0504 15:30:24.852688 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 15:30:24.852729 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 15:30:24.852802 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0504 15:30:24.881913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dpf42" condition "Approved" to 2026-05-04 15:30:24.881854076 +0000 UTC m=+15.626380154 I0504 15:30:24.901921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dpf42" condition "Ready" to 2026-05-04 15:30:24.901907329 +0000 UTC m=+15.646433417 I0504 15:30:24.933957 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:30:24.933945237 +0000 UTC m=+15.678471325 I0504 15:30:24.953725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:30:24.994793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:30:29.855268 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:30:29.855245985 +0000 UTC m=+20.599772073 I0504 15:30:55.243529 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 15:30:55.243481259 +0000 UTC m=+45.988007337 I0504 15:30:55.243916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:30:55.243995 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 15:30:55.243978226 +0000 UTC m=+45.988504314 I0504 15:30:55.271807 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-04 15:30:55.271789509 +0000 UTC m=+46.016315597 I0504 15:30:55.278470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:30:55.278558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:30:55.278582 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 15:30:55.278574869 +0000 UTC m=+46.023100947 I0504 15:30:55.461567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z87nm" condition "Approved" to 2026-05-04 15:30:55.461550577 +0000 UTC m=+46.206076695 I0504 15:30:55.496396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z87nm" condition "Ready" to 2026-05-04 15:30:55.496376728 +0000 UTC m=+46.240902846 I0504 15:30:55.523458 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:30:55.523448726 +0000 UTC m=+46.267974814 I0504 15:30:55.544737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:35:15.029706 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:35:15.029828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-05-04 15:35:15.029819803 +0000 UTC m=+305.774345871 I0504 15:35:15.030164 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-05-04 15:35:15.030159801 +0000 UTC m=+305.774685879 I0504 15:35:15.045257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:35:15.045364 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-05-04 15:35:15.045355801 +0000 UTC m=+305.789881869 I0504 15:35:15.168621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:35:15.204410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-ghxd6" condition "Approved" to 2026-05-04 15:35:15.204393774 +0000 UTC m=+305.948919862 I0504 15:35:15.231704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-ghxd6" condition "Ready" to 2026-05-04 15:35:15.231686744 +0000 UTC m=+305.976212862 I0504 15:35:15.262238 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:35:15.262218158 +0000 UTC m=+306.006744246 I0504 15:35:15.282447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:35:15.283004 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:35:15.282994318 +0000 UTC m=+306.027520426 I0504 15:35:15.302978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:36:21.418063 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 15:36:21.418013478 +0000 UTC m=+372.162539596 I0504 15:36:21.418208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:36:21.418294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 15:36:21.418285936 +0000 UTC m=+372.162812024 E0504 15:36:21.431339 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 15:36:21.431409 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-04 15:36:21.431400264 +0000 UTC m=+372.175926352 E0504 15:36:21.431431 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 15:36:21.439993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:36:21.440115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:36:21.440188 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 15:36:21.440158949 +0000 UTC m=+372.184685037 E0504 15:36:21.442082 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0504 15:36:21.442245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 15:36:21.442305 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 15:36:21.442342 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0504 15:36:21.479425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q2m49" condition "Approved" to 2026-05-04 15:36:21.47941055 +0000 UTC m=+372.223936638 I0504 15:36:21.494015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q2m49" condition "Ready" to 2026-05-04 15:36:21.493998619 +0000 UTC m=+372.238524707 I0504 15:36:21.525446 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:36:21.525430691 +0000 UTC m=+372.269956769 I0504 15:36:21.542965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:36:21.543325 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:36:21.543316393 +0000 UTC m=+372.287842481 I0504 15:36:21.557730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:36:21.560982 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:36:21.560965618 +0000 UTC m=+372.305491706 I0504 15:36:21.565964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:36:26.442632 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:36:26.442614088 +0000 UTC m=+377.187140206 I0504 15:37:10.130408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:10.130518 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 15:37:10.130508837 +0000 UTC m=+420.875034915 I0504 15:37:10.132375 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 15:37:10.132361063 +0000 UTC m=+420.876887161 I0504 15:37:10.132921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 15:37:10.13291526 +0000 UTC m=+420.877441348 I0504 15:37:10.133223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:10.133248 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 15:37:10.13324371 +0000 UTC m=+420.877769808 I0504 15:37:10.140157 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 15:37:10.14014537 +0000 UTC m=+420.884671478 I0504 15:37:10.145435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:10.145466 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 15:37:10.145458941 +0000 UTC m=+420.889985019 I0504 15:37:10.189339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.189434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:10.189461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 15:37:10.189454868 +0000 UTC m=+420.933980936 I0504 15:37:10.189659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.189782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:10.189827 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 15:37:10.189817119 +0000 UTC m=+420.934343207 I0504 15:37:10.189702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.190511 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 15:37:10.19049907 +0000 UTC m=+420.935025168 I0504 15:37:10.380040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vngxt" condition "Approved" to 2026-05-04 15:37:10.380022869 +0000 UTC m=+421.124548987 I0504 15:37:10.426789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tbxk8" condition "Approved" to 2026-05-04 15:37:10.426778029 +0000 UTC m=+421.171304107 I0504 15:37:10.427993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vngxt" condition "Ready" to 2026-05-04 15:37:10.427980226 +0000 UTC m=+421.172506304 I0504 15:37:10.495261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.511328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tbxk8" condition "Ready" to 2026-05-04 15:37:10.511317288 +0000 UTC m=+421.255843366 I0504 15:37:10.597596 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:10.597579758 +0000 UTC m=+421.342105826 I0504 15:37:10.612277 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:10.612262075 +0000 UTC m=+421.356788153 I0504 15:37:10.640862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.641256 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:10.641247186 +0000 UTC m=+421.385773264 I0504 15:37:10.641659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.641841 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:10.641837813 +0000 UTC m=+421.386363891 I0504 15:37:10.755650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.912836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:10.952446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:11.311358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g9s2g" condition "Approved" to 2026-05-04 15:37:11.311342058 +0000 UTC m=+422.055868146 I0504 15:37:11.667304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g9s2g" condition "Ready" to 2026-05-04 15:37:11.667288767 +0000 UTC m=+422.411814855 E0504 15:37:11.747879 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-pln7h\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0504 15:37:11.954340 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-g9s2g" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-tr746" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0504 15:37:12.111439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qpf88" condition "Approved" to 2026-05-04 15:37:12.111420464 +0000 UTC m=+422.855946542 I0504 15:37:12.167476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qpf88" condition "Ready" to 2026-05-04 15:37:12.167455431 +0000 UTC m=+422.911981549 I0504 15:37:12.660969 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:12.660944923 +0000 UTC m=+423.405471031 I0504 15:37:12.755279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:12.755822 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:12.755808953 +0000 UTC m=+423.500335061 I0504 15:37:12.957104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:19.654465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:19.654512 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" condition "Issuing" to 2026-05-04 15:37:19.654504835 +0000 UTC m=+430.399030923 I0504 15:37:19.654464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" condition "Ready" to 2026-05-04 15:37:19.654450253 +0000 UTC m=+430.398976341 I0504 15:37:19.671441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:19.671498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:19.671512 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" condition "Issuing" to 2026-05-04 15:37:19.671506037 +0000 UTC m=+430.416032115 I0504 15:37:20.035584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:20.047084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jd5jx-f98rm" condition "Approved" to 2026-05-04 15:37:20.047070888 +0000 UTC m=+430.791596966 I0504 15:37:20.070734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jd5jx-f98rm" condition "Ready" to 2026-05-04 15:37:20.070722006 +0000 UTC m=+430.815248094 I0504 15:37:20.103154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:20.103136532 +0000 UTC m=+430.847662620 I0504 15:37:20.134978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:20.191004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd5jx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:34.809589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:34.809623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 15:37:34.809614727 +0000 UTC m=+445.554140805 I0504 15:37:34.810226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 15:37:34.810221206 +0000 UTC m=+445.554747284 I0504 15:37:34.827724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:34.827842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:37:34.827872 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 15:37:34.827863748 +0000 UTC m=+445.572389836 I0504 15:37:34.966116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:34.973952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wnb8r" condition "Approved" to 2026-05-04 15:37:34.973931891 +0000 UTC m=+445.718458019 I0504 15:37:35.075769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wnb8r" condition "Ready" to 2026-05-04 15:37:35.075755403 +0000 UTC m=+445.820281481 I0504 15:37:35.102425 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:35.102411628 +0000 UTC m=+445.846937716 I0504 15:37:35.117384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:37:35.117564 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:37:35.117558471 +0000 UTC m=+445.862084549 I0504 15:37:35.141224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:40:57.919431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:40:57.919495 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 15:40:57.919481372 +0000 UTC m=+648.664007490 I0504 15:40:57.919554 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 15:40:57.919535754 +0000 UTC m=+648.664061872 I0504 15:40:57.939731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:40:57.939852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 15:40:57.939841495 +0000 UTC m=+648.684367583 I0504 15:40:58.285152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:40:58.317098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2jft2" condition "Approved" to 2026-05-04 15:40:58.317083932 +0000 UTC m=+649.061610020 I0504 15:40:58.336338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2jft2" condition "Ready" to 2026-05-04 15:40:58.336325916 +0000 UTC m=+649.080852014 I0504 15:40:58.374543 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:40:58.374532276 +0000 UTC m=+649.119058374 I0504 15:40:58.393871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:41:43.217529 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-04 15:41:43.217489883 +0000 UTC m=+693.962015971 I0504 15:41:43.218091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:41:43.218237 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-04 15:41:43.218178965 +0000 UTC m=+693.962705043 I0504 15:41:43.236814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 15:41:43.236892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 15:41:43.236915 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-04 15:41:43.236910153 +0000 UTC m=+693.981436241 I0504 15:41:43.461198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkqtx" condition "Approved" to 2026-05-04 15:41:43.461188195 +0000 UTC m=+694.205714273 I0504 15:41:43.486779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkqtx" condition "Ready" to 2026-05-04 15:41:43.48676997 +0000 UTC m=+694.231296048 I0504 15:41:43.521119 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 15:41:43.521100631 +0000 UTC m=+694.265626709 I0504 15:41:43.543616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"