I0527 19:38:49.034634 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0527 19:38:49.034763 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0527 19:38:49.034853 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0527 19:38:49.038665 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0527 19:38:49.039129 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0527 19:38:49.039249 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0527 19:38:49.039256 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0527 19:38:49.043966 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0527 19:38:49.056650 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0527 19:38:49.061627 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0527 19:38:49.061848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0527 19:38:49.068546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0527 19:38:49.071168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0527 19:38:49.073446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0527 19:38:49.075824 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0527 19:38:49.075848 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0527 19:38:49.075856 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0527 19:38:49.075872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0527 19:38:49.078145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0527 19:38:49.079743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0527 19:38:49.083784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0527 19:38:49.086565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0527 19:38:49.088920 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0527 19:38:49.089015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0527 19:38:49.091559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0527 19:38:49.093878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0527 19:38:49.096446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0527 19:38:49.098683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0527 19:38:49.100444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0527 19:38:49.104862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0527 19:38:49.110515 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0527 19:38:49.110569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0527 19:38:49.116652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0527 19:38:49.118322 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.118945 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.120024 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.120509 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.138281 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.151332 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.168346 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.184687 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.198201 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:38:49.200613 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0527 19:39:01.179400 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-27 19:39:01.179375731 +0000 UTC m=+12.177874128 I0527 19:39:01.980952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:39:01.981012 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 19:39:01.980999851 +0000 UTC m=+12.979498248 I0527 19:39:01.982481 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-27 19:39:01.982469334 +0000 UTC m=+12.980967731 E0527 19:39:01.999396 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:39:01.999500 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-27 19:39:01.999489584 +0000 UTC m=+12.997987971 E0527 19:39:01.999536 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:39:02.001092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:02.001173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:39:02.001197 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-27 19:39:02.001189807 +0000 UTC m=+12.999688194 E0527 19:39:02.014531 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0527 19:39:02.014606 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:39:02.014635 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:39:02.014826 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0527 19:39:02.079150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:02.079764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kxnh8" condition "Approved" to 2026-05-27 19:39:02.079751578 +0000 UTC m=+13.078249995 I0527 19:39:02.110958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kxnh8" condition "Ready" to 2026-05-27 19:39:02.110925753 +0000 UTC m=+13.109424110 I0527 19:39:02.163691 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:02.163677417 +0000 UTC m=+13.162175804 I0527 19:39:02.282498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:07.015243 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:07.015230854 +0000 UTC m=+18.013729221 I0527 19:39:31.967776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:39:31.967826 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-27 19:39:31.967813901 +0000 UTC m=+42.966312298 I0527 19:39:31.968173 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 19:39:31.968145051 +0000 UTC m=+42.966643408 I0527 19:39:31.984861 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-27 19:39:31.984845221 +0000 UTC m=+42.983343628 I0527 19:39:31.998722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:31.998896 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-27 19:39:31.998886136 +0000 UTC m=+42.997384513 I0527 19:39:32.205266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:32.244744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5kbwl" condition "Approved" to 2026-05-27 19:39:32.244734562 +0000 UTC m=+43.243232919 I0527 19:39:32.274053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5kbwl" condition "Ready" to 2026-05-27 19:39:32.274042034 +0000 UTC m=+43.272540401 I0527 19:39:32.308668 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:32.308648116 +0000 UTC m=+43.307146503 I0527 19:39:32.336533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:32.337062 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:39:32.337049716 +0000 UTC m=+43.335548073 I0527 19:39:32.344654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:39:32.360722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:34.723129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-203.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:44:34.723176 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-203.nip.io-tls" condition "Issuing" to 2026-05-27 19:44:34.723164381 +0000 UTC m=+345.721662768 I0527 19:44:34.723268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-203.nip.io-tls" condition "Ready" to 2026-05-27 19:44:34.723252433 +0000 UTC m=+345.721750810 I0527 19:44:34.738972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-203.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-203.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:34.739056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-203.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:44:34.739083 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-203.nip.io-tls" condition "Issuing" to 2026-05-27 19:44:34.739074072 +0000 UTC m=+345.737572459 I0527 19:44:35.108013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-203.nip.io-tls-b4nbc" condition "Approved" to 2026-05-27 19:44:35.107997702 +0000 UTC m=+346.106496060 I0527 19:44:35.135199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-203.nip.io-tls-b4nbc" condition "Ready" to 2026-05-27 19:44:35.135180261 +0000 UTC m=+346.133678628 I0527 19:44:35.164441 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-203.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:44:35.164427575 +0000 UTC m=+346.162925942 I0527 19:44:35.182808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-203.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-203.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:44:35.185992 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-203.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:44:35.185980132 +0000 UTC m=+346.184478499 I0527 19:44:35.199638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-203.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-203.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:40.722716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:40.722708 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-27 19:45:40.72264962 +0000 UTC m=+411.721148017 I0527 19:45:40.722758 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 19:45:40.722749776 +0000 UTC m=+411.721248163 E0527 19:45:40.735763 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:45:40.735806 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-27 19:45:40.735797598 +0000 UTC m=+411.734295965 E0527 19:45:40.735850 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0527 19:45:40.739669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:40.739890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:45:40.739988 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-27 19:45:40.739978424 +0000 UTC m=+411.738476791 E0527 19:45:40.747905 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0527 19:45:40.748149 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:45:40.748194 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0527 19:45:40.748262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0527 19:45:40.779377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-27gld" condition "Approved" to 2026-05-27 19:45:40.779363545 +0000 UTC m=+411.777861902 I0527 19:45:40.792874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-27gld" condition "Ready" to 2026-05-27 19:45:40.792861126 +0000 UTC m=+411.791359493 I0527 19:45:40.818188 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:40.818165899 +0000 UTC m=+411.816664296 I0527 19:45:40.837012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:40.837724 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:40.837711645 +0000 UTC m=+411.836210012 I0527 19:45:40.854409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:45:45.748467 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:45:45.748448192 +0000 UTC m=+416.746946589 I0527 19:46:27.897404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:27.897436 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-27 19:46:27.89742982 +0000 UTC m=+458.895928167 I0527 19:46:27.901390 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 19:46:27.901370311 +0000 UTC m=+458.899868668 I0527 19:46:27.921383 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-27 19:46:27.921371797 +0000 UTC m=+458.919870144 I0527 19:46:27.921688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:27.921752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 19:46:27.921748833 +0000 UTC m=+458.920247190 I0527 19:46:27.930346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:27.930377 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 19:46:27.930371527 +0000 UTC m=+458.928869884 I0527 19:46:27.930673 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-27 19:46:27.930669059 +0000 UTC m=+458.929167416 I0527 19:46:28.044636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.044694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-27 19:46:28.044688665 +0000 UTC m=+459.043187022 I0527 19:46:28.056694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.062794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.062856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:28.062871 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-27 19:46:28.062867127 +0000 UTC m=+459.061365484 I0527 19:46:28.066697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:28.066810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-27 19:46:28.066800206 +0000 UTC m=+459.065298603 I0527 19:46:28.207903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.245436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.261950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m5zb9" condition "Approved" to 2026-05-27 19:46:28.26194005 +0000 UTC m=+459.260438407 I0527 19:46:28.278909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9ltjd" condition "Approved" to 2026-05-27 19:46:28.278898619 +0000 UTC m=+459.277396986 I0527 19:46:28.283591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m5zb9" condition "Ready" to 2026-05-27 19:46:28.283580361 +0000 UTC m=+459.282078728 I0527 19:46:28.308960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9ltjd" condition "Ready" to 2026-05-27 19:46:28.308951742 +0000 UTC m=+459.307450099 I0527 19:46:28.333030 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:28.333017347 +0000 UTC m=+459.331515724 I0527 19:46:28.363255 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:28.363247147 +0000 UTC m=+459.361745504 I0527 19:46:28.367411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.367696 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:28.367689308 +0000 UTC m=+459.366187675 I0527 19:46:28.402592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.403087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:28.771006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sjhnl" condition "Approved" to 2026-05-27 19:46:28.770996325 +0000 UTC m=+459.769494682 I0527 19:46:28.928621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sjhnl" condition "Ready" to 2026-05-27 19:46:28.928607965 +0000 UTC m=+459.927106352 I0527 19:46:29.330493 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:29.330483697 +0000 UTC m=+460.328982044 I0527 19:46:29.437549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:29.437949 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:29.437941518 +0000 UTC m=+460.436439875 I0527 19:46:29.666709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:29.715107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:37.510117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:37.510170 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" condition "Issuing" to 2026-05-27 19:46:37.510161117 +0000 UTC m=+468.508659474 I0527 19:46:37.510755 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" condition "Ready" to 2026-05-27 19:46:37.510747621 +0000 UTC m=+468.509245978 I0527 19:46:37.525412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:37.525495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" condition "Ready" to 2026-05-27 19:46:37.52548882 +0000 UTC m=+468.523987177 I0527 19:46:37.606583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:37.650229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zhc8v-kqvvz" condition "Approved" to 2026-05-27 19:46:37.650217352 +0000 UTC m=+468.648715709 I0527 19:46:37.671272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zhc8v-kqvvz" condition "Ready" to 2026-05-27 19:46:37.671261186 +0000 UTC m=+468.669759543 I0527 19:46:37.706844 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:37.706791528 +0000 UTC m=+468.705289915 I0527 19:46:37.729689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:37.730219 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:37.730206148 +0000 UTC m=+468.728704505 I0527 19:46:37.753962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zhc8v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:51.816256 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 19:46:51.816241002 +0000 UTC m=+482.814739379 I0527 19:46:51.816294 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:46:51.816313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-27 19:46:51.816308624 +0000 UTC m=+482.814806981 I0527 19:46:51.832825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:51.832896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-27 19:46:51.832888445 +0000 UTC m=+482.831386812 I0527 19:46:52.079640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:52.120481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stn4h" condition "Approved" to 2026-05-27 19:46:52.120462026 +0000 UTC m=+483.118960413 I0527 19:46:52.141675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stn4h" condition "Ready" to 2026-05-27 19:46:52.141659935 +0000 UTC m=+483.140158302 I0527 19:46:52.182562 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:52.182549868 +0000 UTC m=+483.181048215 I0527 19:46:52.213117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:52.213595 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:52.213587863 +0000 UTC m=+483.212086220 I0527 19:46:52.286455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:46:52.286791 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:46:52.286783279 +0000 UTC m=+483.285281646 I0527 19:46:52.290303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:17.680439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:50:17.680537 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 19:50:17.680525569 +0000 UTC m=+688.679023966 I0527 19:50:17.680815 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-27 19:50:17.680703783 +0000 UTC m=+688.679202150 I0527 19:50:17.708352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:17.708467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:50:17.708491 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-27 19:50:17.708485003 +0000 UTC m=+688.706983360 I0527 19:50:17.976912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9zlq8" condition "Approved" to 2026-05-27 19:50:17.976897359 +0000 UTC m=+688.975395726 I0527 19:50:18.000526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9zlq8" condition "Ready" to 2026-05-27 19:50:18.000517164 +0000 UTC m=+688.999015521 I0527 19:50:18.031847 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:50:18.031831527 +0000 UTC m=+689.030329894 I0527 19:50:18.064005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:18.064779 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:50:18.064770693 +0000 UTC m=+689.063269050 I0527 19:50:18.096839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:18.097439 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:50:18.097429734 +0000 UTC m=+689.095928091 I0527 19:50:59.875683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0527 19:50:59.875744 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-27 19:50:59.875736009 +0000 UTC m=+730.874234376 I0527 19:50:59.876639 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 19:50:59.876632818 +0000 UTC m=+730.875131195 I0527 19:50:59.891595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:50:59.891707 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-27 19:50:59.89169803 +0000 UTC m=+730.890196407 I0527 19:51:00.200848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0527 19:51:00.238898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-57bcl" condition "Approved" to 2026-05-27 19:51:00.238883382 +0000 UTC m=+731.237381739 I0527 19:51:00.263485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-57bcl" condition "Ready" to 2026-05-27 19:51:00.263292715 +0000 UTC m=+731.261791092 I0527 19:51:00.292984 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-27 19:51:00.29296745 +0000 UTC m=+731.291465807 I0527 19:51:00.318174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"