I0505 09:35:18.784877 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 09:35:18.785005 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 09:35:18.785087 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 09:35:18.788533 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 09:35:18.788891 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 09:35:18.789255 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 09:35:18.788960 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 09:35:18.795030 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 09:35:18.808886 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 09:35:18.813183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 09:35:18.816151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 09:35:18.818804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 09:35:18.823293 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 09:35:18.823360 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 09:35:18.823485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 09:35:18.825243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 09:35:18.827987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 09:35:18.829581 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 09:35:18.829617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 09:35:18.831631 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 09:35:18.831726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 09:35:18.833652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 09:35:18.835304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 09:35:18.839233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 09:35:18.841152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 09:35:18.842902 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 09:35:18.844853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 09:35:18.846693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 09:35:18.848299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 09:35:18.848317 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 09:35:18.848352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 09:35:18.850340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 09:35:18.852353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 09:35:18.856133 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.856827 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.857202 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.858096 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.871841 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.895840 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.906239 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.915766 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.933431 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:18.945769 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 09:35:32.663904 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 09:35:32.663877804 +0000 UTC m=+13.911286889 I0505 09:35:33.423245 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 09:35:33.423231915 +0000 UTC m=+14.670641000 I0505 09:35:33.423596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:35:33.423666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 09:35:33.423649582 +0000 UTC m=+14.671058657 E0505 09:35:33.436758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 09:35:33.436836 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 09:35:33.436819693 +0000 UTC m=+14.684228778 E0505 09:35:33.436885 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 09:35:33.444518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:35:33.444633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:35:33.444689 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 09:35:33.444681227 +0000 UTC m=+14.692090302 E0505 09:35:33.449697 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 09:35:33.450275 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 09:35:33.450356 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 09:35:33.450400 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 09:35:33.493913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ckhjh" condition "Approved" to 2026-05-05 09:35:33.493897387 +0000 UTC m=+14.741306472 I0505 09:35:33.511737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ckhjh" condition "Ready" to 2026-05-05 09:35:33.511723013 +0000 UTC m=+14.759132128 I0505 09:35:33.542333 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:35:33.542320983 +0000 UTC m=+14.789730068 I0505 09:35:33.562592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:35:38.450467 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:35:38.450458924 +0000 UTC m=+19.697867999 I0505 09:36:02.154766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:36:02.154901 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 09:36:02.154878227 +0000 UTC m=+43.402287302 I0505 09:36:02.155194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 09:36:02.155178052 +0000 UTC m=+43.402587127 I0505 09:36:02.176415 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 09:36:02.176402862 +0000 UTC m=+43.423811947 I0505 09:36:02.180920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:36:02.181044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:36:02.181098 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 09:36:02.18109193 +0000 UTC m=+43.428500995 I0505 09:36:02.323485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:36:02.332649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ql587" condition "Approved" to 2026-05-05 09:36:02.332624081 +0000 UTC m=+43.580033156 I0505 09:36:02.365875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ql587" condition "Ready" to 2026-05-05 09:36:02.365860786 +0000 UTC m=+43.613269891 I0505 09:36:02.392123 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:36:02.39211235 +0000 UTC m=+43.639521435 I0505 09:36:02.416565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:36:02.416820 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:36:02.416813859 +0000 UTC m=+43.664222934 I0505 09:36:02.437592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:40:30.404311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-05 09:40:30.404287254 +0000 UTC m=+311.651696359 I0505 09:40:30.404361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:40:30.404443 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-05 09:40:30.404430746 +0000 UTC m=+311.651839861 I0505 09:40:30.420165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:40:30.420381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:40:30.420413 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-05 09:40:30.420406325 +0000 UTC m=+311.667815430 I0505 09:40:30.873832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-swlfq" condition "Approved" to 2026-05-05 09:40:30.873817794 +0000 UTC m=+312.121226899 I0505 09:40:30.901178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-swlfq" condition "Ready" to 2026-05-05 09:40:30.901150884 +0000 UTC m=+312.148559949 I0505 09:40:30.927587 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:40:30.927569069 +0000 UTC m=+312.174978154 I0505 09:40:30.946041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:40:30.946327 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:40:30.946319211 +0000 UTC m=+312.193728296 I0505 09:40:30.964346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.878925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 09:41:36.878879788 +0000 UTC m=+378.126288893 I0505 09:41:36.879565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:41:36.879595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 09:41:36.879588212 +0000 UTC m=+378.126997317 E0505 09:41:36.893740 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 09:41:36.893796 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 09:41:36.893783003 +0000 UTC m=+378.141192118 E0505 09:41:36.893875 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 09:41:36.895832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.896039 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 09:41:36.896028619 +0000 UTC m=+378.143437734 I0505 09:41:36.910278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.910448 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 09:41:36.910438224 +0000 UTC m=+378.157847289 E0505 09:41:36.913784 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 09:41:36.914136 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 09:41:36.914199 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 09:41:36.914236 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 09:41:36.914784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cdbx5" condition "Approved" to 2026-05-05 09:41:36.914769573 +0000 UTC m=+378.162178678 I0505 09:41:36.926481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cdbx5" condition "Ready" to 2026-05-05 09:41:36.926456952 +0000 UTC m=+378.173866027 I0505 09:41:36.945075 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:41:36.945061553 +0000 UTC m=+378.192470628 I0505 09:41:36.968753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.968978 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:41:36.968972023 +0000 UTC m=+378.216381108 I0505 09:41:36.981615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.994031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.994228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:41:36.994859 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:41:36.994845103 +0000 UTC m=+378.242254188 I0505 09:41:41.914508 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:41:41.914492152 +0000 UTC m=+383.161901257 I0505 09:42:26.819791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:26.819834 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 09:42:26.819815854 +0000 UTC m=+428.067224929 I0505 09:42:26.820562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 09:42:26.820543008 +0000 UTC m=+428.067952083 I0505 09:42:26.853495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:26.853551 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 09:42:26.853543132 +0000 UTC m=+428.100952207 I0505 09:42:26.854550 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 09:42:26.854041081 +0000 UTC m=+428.101450146 I0505 09:42:26.858809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:26.858843 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 09:42:26.858837751 +0000 UTC m=+428.106246826 I0505 09:42:26.862664 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 09:42:26.862651324 +0000 UTC m=+428.110060419 I0505 09:42:26.897536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:26.897625 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 09:42:26.897616074 +0000 UTC m=+428.145025149 I0505 09:42:26.901812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:26.901951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:26.902032 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 09:42:26.902023018 +0000 UTC m=+428.149432093 I0505 09:42:26.903142 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 09:42:26.903129559 +0000 UTC m=+428.150538674 I0505 09:42:27.037759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:27.062982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hn4mj" condition "Approved" to 2026-05-05 09:42:27.062970099 +0000 UTC m=+428.310379164 I0505 09:42:27.080187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hn4mj" condition "Ready" to 2026-05-05 09:42:27.080180465 +0000 UTC m=+428.327589530 I0505 09:42:27.106557 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:27.106541512 +0000 UTC m=+428.353950597 I0505 09:42:27.159747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:27.169927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:27.538369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tgn87" condition "Approved" to 2026-05-05 09:42:27.53756597 +0000 UTC m=+428.784975045 I0505 09:42:27.562877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:27.563294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tgn87" condition "Ready" to 2026-05-05 09:42:27.563282326 +0000 UTC m=+428.810691391 I0505 09:42:27.600241 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:27.600229224 +0000 UTC m=+428.847638299 I0505 09:42:27.657549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:27.658002 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:27.657991064 +0000 UTC m=+428.905400149 I0505 09:42:27.723581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65w6r" condition "Approved" to 2026-05-05 09:42:27.723561502 +0000 UTC m=+428.970970577 I0505 09:42:27.975543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65w6r" condition "Ready" to 2026-05-05 09:42:27.97552961 +0000 UTC m=+429.222938695 I0505 09:42:28.436511 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:28.436488832 +0000 UTC m=+429.683897947 I0505 09:42:28.609000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:28.609716 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:28.609702288 +0000 UTC m=+429.857111403 E0505 09:42:28.903309 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-67ssz\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0505 09:42:28.968124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:29.011666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:35.260111 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" condition "Ready" to 2026-05-05 09:42:35.260092556 +0000 UTC m=+436.507501641 I0505 09:42:35.260452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:35.260809 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" condition "Issuing" to 2026-05-05 09:42:35.260690106 +0000 UTC m=+436.508099221 I0505 09:42:35.282742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:35.282971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:35.283121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" condition "Issuing" to 2026-05-05 09:42:35.283113305 +0000 UTC m=+436.530522390 I0505 09:42:35.766029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x4w4n-6zzn8" condition "Approved" to 2026-05-05 09:42:35.766000177 +0000 UTC m=+437.013409282 I0505 09:42:35.825487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x4w4n-6zzn8" condition "Ready" to 2026-05-05 09:42:35.825463679 +0000 UTC m=+437.072872784 I0505 09:42:36.051225 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:36.051205295 +0000 UTC m=+437.298614370 I0505 09:42:36.194364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:36.195193 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:36.195181611 +0000 UTC m=+437.442590726 I0505 09:42:36.339147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x4w4n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:59.260156 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 09:42:59.260119505 +0000 UTC m=+460.507528590 I0505 09:42:59.260199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:59.260272 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 09:42:59.260261317 +0000 UTC m=+460.507670402 I0505 09:42:59.280414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:42:59.280586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:42:59.280625 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 09:42:59.280616157 +0000 UTC m=+460.528025232 I0505 09:42:59.512701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m2sz4" condition "Approved" to 2026-05-05 09:42:59.51268348 +0000 UTC m=+460.760092565 I0505 09:42:59.529669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m2sz4" condition "Ready" to 2026-05-05 09:42:59.529653799 +0000 UTC m=+460.777062874 I0505 09:42:59.558250 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:42:59.558226808 +0000 UTC m=+460.805635913 I0505 09:42:59.583047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:46:20.866382 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 09:46:20.866362632 +0000 UTC m=+662.113771717 I0505 09:46:20.866882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:46:20.866915 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 09:46:20.86690593 +0000 UTC m=+662.114315015 I0505 09:46:20.886121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:46:20.886226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:46:20.886260 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 09:46:20.886248183 +0000 UTC m=+662.133657298 I0505 09:46:21.055787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hg47x" condition "Approved" to 2026-05-05 09:46:21.05577437 +0000 UTC m=+662.303183465 I0505 09:46:21.080797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hg47x" condition "Ready" to 2026-05-05 09:46:21.080781713 +0000 UTC m=+662.328190788 I0505 09:46:21.111191 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:46:21.111176624 +0000 UTC m=+662.358585709 I0505 09:46:21.137944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:47:05.104611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 09:47:05.104686 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 09:47:05.104679589 +0000 UTC m=+706.352088664 I0505 09:47:05.104840 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 09:47:05.104793671 +0000 UTC m=+706.352202746 I0505 09:47:05.123486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:47:05.123687 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 09:47:05.123678163 +0000 UTC m=+706.371087248 I0505 09:47:05.345539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:47:05.382934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jq96k" condition "Approved" to 2026-05-05 09:47:05.382905668 +0000 UTC m=+706.630314743 I0505 09:47:05.400260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jq96k" condition "Ready" to 2026-05-05 09:47:05.400245105 +0000 UTC m=+706.647654190 I0505 09:47:05.438267 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:47:05.438250122 +0000 UTC m=+706.685659207 I0505 09:47:05.462562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:47:05.463197 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 09:47:05.463183601 +0000 UTC m=+706.710592686 I0505 09:47:05.500338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 09:47:05.500889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"