I0521 19:35:51.308912 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0521 19:35:51.309145 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0521 19:35:51.309347 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0521 19:35:51.317258 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0521 19:35:51.318079 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0521 19:35:51.318178 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0521 19:35:51.318255 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0521 19:35:51.322169 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0521 19:35:51.339927 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0521 19:35:51.340169 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0521 19:35:51.345037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0521 19:35:51.350209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0521 19:35:51.353246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0521 19:35:51.357368 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0521 19:35:51.357396 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0521 19:35:51.357449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0521 19:35:51.359471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0521 19:35:51.361218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0521 19:35:51.363190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0521 19:35:51.365191 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0521 19:35:51.367263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0521 19:35:51.369007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0521 19:35:51.374699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0521 19:35:51.379049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0521 19:35:51.381708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0521 19:35:51.383966 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0521 19:35:51.384059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0521 19:35:51.386615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0521 19:35:51.389028 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0521 19:35:51.389049 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0521 19:35:51.389170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0521 19:35:51.391357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0521 19:35:51.395646 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.395892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0521 19:35:51.399261 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.400354 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.415785 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.431719 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.450834 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.465692 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.481445 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.504473 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:35:51.504958 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0521 19:36:06.041984 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-21 19:36:06.041957185 +0000 UTC m=+14.761651454 I0521 19:36:06.813311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:36:06.813388 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 19:36:06.813377621 +0000 UTC m=+15.533071900 I0521 19:36:06.813703 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-21 19:36:06.813683867 +0000 UTC m=+15.533378196 E0521 19:36:06.862321 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:36:06.862425 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-21 19:36:06.862414143 +0000 UTC m=+15.582108412 E0521 19:36:06.862459 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:36:06.865499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:06.865673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:36:06.865760 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-21 19:36:06.865708296 +0000 UTC m=+15.585402575 E0521 19:36:07.537720 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0521 19:36:07.537873 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:36:07.537975 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:36:07.538047 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0521 19:36:08.585236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pb9rx" condition "Approved" to 2026-05-21 19:36:08.585210028 +0000 UTC m=+17.304904297 I0521 19:36:08.645044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pb9rx" condition "Ready" to 2026-05-21 19:36:08.645030485 +0000 UTC m=+17.364724734 I0521 19:36:08.838693 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:36:08.838670217 +0000 UTC m=+17.558364486 I0521 19:36:08.905757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:08.906051 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:36:08.906043598 +0000 UTC m=+17.625737847 I0521 19:36:08.941222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:08.949309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:12.538587 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:36:12.538568389 +0000 UTC m=+21.258262658 I0521 19:36:44.590494 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-21 19:36:44.590479794 +0000 UTC m=+53.310174043 I0521 19:36:44.590561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:36:44.590611 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-21 19:36:44.590599796 +0000 UTC m=+53.310294075 I0521 19:36:44.601451 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-21 19:36:44.601437523 +0000 UTC m=+53.321131802 I0521 19:36:44.609201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:44.609256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:36:44.609271 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-21 19:36:44.609266802 +0000 UTC m=+53.328961051 I0521 19:36:44.736748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:44.740877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hp8ng" condition "Approved" to 2026-05-21 19:36:44.740866924 +0000 UTC m=+53.460561173 I0521 19:36:44.777552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hp8ng" condition "Ready" to 2026-05-21 19:36:44.777542431 +0000 UTC m=+53.497236670 I0521 19:36:44.805595 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:36:44.805568524 +0000 UTC m=+53.525262773 I0521 19:36:44.833922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:44.834257 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:36:44.834240559 +0000 UTC m=+53.553934808 I0521 19:36:44.841153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:36:44.858896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:37.793224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:41:37.793416 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Issuing" to 2026-05-21 19:41:37.793399402 +0000 UTC m=+346.513093751 I0521 19:41:37.793229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready" to 2026-05-21 19:41:37.793209049 +0000 UTC m=+346.512903318 I0521 19:41:37.814430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:37.814538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:41:37.814584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Issuing" to 2026-05-21 19:41:37.814577533 +0000 UTC m=+346.534271782 I0521 19:41:37.987282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:37.994927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-ghb4n" condition "Approved" to 2026-05-21 19:41:37.994914999 +0000 UTC m=+346.714609238 I0521 19:41:38.026575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-ghb4n" condition "Ready" to 2026-05-21 19:41:38.026561177 +0000 UTC m=+346.746255456 I0521 19:41:38.054542 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:41:38.054533146 +0000 UTC m=+346.774227395 I0521 19:41:38.076465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:38.076806 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:41:38.076798268 +0000 UTC m=+346.796492517 I0521 19:41:38.081365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:38.097688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:41:38.097957 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:41:38.097950749 +0000 UTC m=+346.817644998 I0521 19:42:54.301449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:42:54.301513 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-21 19:42:54.301499779 +0000 UTC m=+423.021194058 I0521 19:42:54.301898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:42:54.301866377 +0000 UTC m=+423.021560656 E0521 19:42:54.314985 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:42:54.315028 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-21 19:42:54.315022133 +0000 UTC m=+423.034716372 E0521 19:42:54.315064 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0521 19:42:54.322146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:42:54.322286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:42:54.322274029 +0000 UTC m=+423.041968278 E0521 19:42:54.330039 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0521 19:42:54.330233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:42:54.330282 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0521 19:42:54.330367 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0521 19:42:54.341310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:42:54.341395 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-21 19:42:54.341386779 +0000 UTC m=+423.061081028 I0521 19:42:54.341781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:42:54.343842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6v6h9" condition "Approved" to 2026-05-21 19:42:54.343828735 +0000 UTC m=+423.063523004 I0521 19:42:54.356126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6v6h9" condition "Ready" to 2026-05-21 19:42:54.356113475 +0000 UTC m=+423.075807724 I0521 19:42:54.390564 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:42:54.390541881 +0000 UTC m=+423.110236150 I0521 19:42:54.412196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:42:54.462278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:42:59.330850 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:42:59.330835523 +0000 UTC m=+428.050529802 I0521 19:43:41.520285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:41.520377 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 19:43:41.520366331 +0000 UTC m=+470.240060610 I0521 19:43:41.520976 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-21 19:43:41.520959532 +0000 UTC m=+470.240653781 I0521 19:43:41.521153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:41.521205 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-21 19:43:41.521195697 +0000 UTC m=+470.240889976 I0521 19:43:41.521407 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-21 19:43:41.521399481 +0000 UTC m=+470.241093760 I0521 19:43:41.532348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:41.532386 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-21 19:43:41.532380847 +0000 UTC m=+470.252075086 I0521 19:43:41.532587 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 19:43:41.532568901 +0000 UTC m=+470.252263150 I0521 19:43:41.541557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.541637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:41.541675 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-21 19:43:41.541665751 +0000 UTC m=+470.261359980 I0521 19:43:41.543716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.543761 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-21 19:43:41.543757091 +0000 UTC m=+470.263451330 I0521 19:43:41.550485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.550536 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-21 19:43:41.550529947 +0000 UTC m=+470.270224176 I0521 19:43:41.676270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.717175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wh7rc" condition "Approved" to 2026-05-21 19:43:41.717154276 +0000 UTC m=+470.436848545 I0521 19:43:41.747777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wh7rc" condition "Ready" to 2026-05-21 19:43:41.74775772 +0000 UTC m=+470.467451969 I0521 19:43:41.767813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.773431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sszw9" condition "Approved" to 2026-05-21 19:43:41.773417553 +0000 UTC m=+470.493111792 I0521 19:43:41.778351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:41.778342945 +0000 UTC m=+470.498037184 I0521 19:43:41.795837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sszw9" condition "Ready" to 2026-05-21 19:43:41.795820883 +0000 UTC m=+470.515515143 I0521 19:43:41.802018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.802420 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:41.802410977 +0000 UTC m=+470.522105226 I0521 19:43:41.811428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.860108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:41.860488 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:41.860473127 +0000 UTC m=+470.580167376 I0521 19:43:41.911106 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:41.911090888 +0000 UTC m=+470.630785157 I0521 19:43:42.056628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.057264 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:42.057250062 +0000 UTC m=+470.776944341 I0521 19:43:42.359162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.459741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.522245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:42.666321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6tvxg" condition "Approved" to 2026-05-21 19:43:42.666308358 +0000 UTC m=+471.386002607 I0521 19:43:42.772888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6tvxg" condition "Ready" to 2026-05-21 19:43:42.772869369 +0000 UTC m=+471.492563648 I0521 19:43:43.210798 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:43.210776861 +0000 UTC m=+471.930471130 I0521 19:43:43.345491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:43.346032 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:43.346017421 +0000 UTC m=+472.065711700 I0521 19:43:43.506770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:50.783729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:50.783779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Issuing" to 2026-05-21 19:43:50.783767277 +0000 UTC m=+479.503461526 I0521 19:43:50.783979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Ready" to 2026-05-21 19:43:50.78395124 +0000 UTC m=+479.503645509 I0521 19:43:50.804765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fx92m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:50.804847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:43:50.804868 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Issuing" to 2026-05-21 19:43:50.804861773 +0000 UTC m=+479.524556012 I0521 19:43:51.278316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fx92m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:51.287082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fx92m-knw5r" condition "Approved" to 2026-05-21 19:43:51.287068937 +0000 UTC m=+480.006763186 I0521 19:43:51.311737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fx92m-knw5r" condition "Ready" to 2026-05-21 19:43:51.31172113 +0000 UTC m=+480.031415379 I0521 19:43:51.348866 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:51.348827897 +0000 UTC m=+480.068522136 I0521 19:43:51.372203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fx92m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:51.372604 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:51.372597933 +0000 UTC m=+480.092292172 I0521 19:43:51.395509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fx92m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:51.396217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fx92m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:43:51.396708 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fx92m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:43:51.396696056 +0000 UTC m=+480.116390335 I0521 19:44:36.078761 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-21 19:44:36.078731745 +0000 UTC m=+524.798426014 I0521 19:44:36.078791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:44:36.078970 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-21 19:44:36.078947869 +0000 UTC m=+524.798642158 I0521 19:44:36.097666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:44:36.097781 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-21 19:44:36.097768272 +0000 UTC m=+524.817462521 I0521 19:44:36.253002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:44:36.289286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fxvpx" condition "Approved" to 2026-05-21 19:44:36.289257708 +0000 UTC m=+525.008951987 I0521 19:44:36.311572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fxvpx" condition "Ready" to 2026-05-21 19:44:36.311558077 +0000 UTC m=+525.031252326 I0521 19:44:36.340042 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:44:36.340020021 +0000 UTC m=+525.059714290 I0521 19:44:36.370273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:48:02.727522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-21 19:48:02.727498131 +0000 UTC m=+731.447192430 I0521 19:48:02.727665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:48:02.727931 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 19:48:02.727876438 +0000 UTC m=+731.447570727 I0521 19:48:02.746709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:48:02.746834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0521 19:48:02.746871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-21 19:48:02.746860008 +0000 UTC m=+731.466554277 I0521 19:48:03.061451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l6sxg" condition "Approved" to 2026-05-21 19:48:03.061439812 +0000 UTC m=+731.781134061 I0521 19:48:03.088141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l6sxg" condition "Ready" to 2026-05-21 19:48:03.088124817 +0000 UTC m=+731.807819066 I0521 19:48:03.128731 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:48:03.128713225 +0000 UTC m=+731.848407474 I0521 19:48:03.160391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:48:03.161223 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:48:03.16121052 +0000 UTC m=+731.880904789 I0521 19:48:03.183408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0521 19:48:03.183908 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-21 19:48:03.18389462 +0000 UTC m=+731.903588869