I0513 21:59:28.420579 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0513 21:59:28.420992 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0513 21:59:28.421161 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0513 21:59:28.427446 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0513 21:59:28.428158 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0513 21:59:28.428204 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0513 21:59:28.428362 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0513 21:59:28.431486 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0513 21:59:28.446626 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0513 21:59:28.446881 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0513 21:59:28.450409 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0513 21:59:28.450479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0513 21:59:28.453962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0513 21:59:28.459048 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0513 21:59:28.459480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0513 21:59:28.463114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0513 21:59:28.463311 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0513 21:59:28.466420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0513 21:59:28.468230 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0513 21:59:28.468316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0513 21:59:28.470167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0513 21:59:28.472046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0513 21:59:28.475736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0513 21:59:28.483725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0513 21:59:28.488133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0513 21:59:28.491683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0513 21:59:28.494084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0513 21:59:28.494190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0513 21:59:28.496807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0513 21:59:28.499365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0513 21:59:28.502244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0513 21:59:28.507280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0513 21:59:28.512910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0513 21:59:28.515500 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.515911 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.518617 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.518928 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.539896 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.555631 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.565795 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.578063 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.595677 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:28.606197 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 21:59:39.111618 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-13 21:59:39.111606162 +0000 UTC m=+10.721534517 I0513 21:59:39.803908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 21:59:39.804122 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-13 21:59:39.804111427 +0000 UTC m=+11.414039802 I0513 21:59:39.803978 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-13 21:59:39.80396106 +0000 UTC m=+11.413889435 E0513 21:59:39.818753 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 21:59:39.818864 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-13 21:59:39.818854512 +0000 UTC m=+11.428782867 E0513 21:59:39.818899 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 21:59:39.822474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 21:59:39.822773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 21:59:39.822959 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-13 21:59:39.822948211 +0000 UTC m=+11.432876586 E0513 21:59:39.832280 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0513 21:59:39.832383 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 21:59:39.832432 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 21:59:39.832531 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0513 21:59:39.862929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 21:59:39.868807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ttbvs" condition "Approved" to 2026-05-13 21:59:39.868796735 +0000 UTC m=+11.478725090 I0513 21:59:39.882224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ttbvs" condition "Ready" to 2026-05-13 21:59:39.882216847 +0000 UTC m=+11.492145192 I0513 21:59:39.906220 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 21:59:39.90620393 +0000 UTC m=+11.516132305 I0513 21:59:39.927379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 21:59:39.927693 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 21:59:39.927686923 +0000 UTC m=+11.537615288 I0513 21:59:39.941751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 21:59:39.942052 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 21:59:39.94204465 +0000 UTC m=+11.551973005 I0513 21:59:44.833479 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 21:59:44.833430463 +0000 UTC m=+16.443358848 I0513 22:00:09.355612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:00:09.355621 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-13 22:00:09.35559437 +0000 UTC m=+40.965522715 I0513 22:00:09.355676 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-13 22:00:09.355666453 +0000 UTC m=+40.965594808 I0513 22:00:09.368970 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-13 22:00:09.368956896 +0000 UTC m=+40.978885251 I0513 22:00:09.391256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:00:09.391358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:00:09.391385 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-13 22:00:09.391378752 +0000 UTC m=+41.001307107 I0513 22:00:09.514351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:00:09.532177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jrtb2" condition "Approved" to 2026-05-13 22:00:09.532165434 +0000 UTC m=+41.142093789 I0513 22:00:09.575398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jrtb2" condition "Ready" to 2026-05-13 22:00:09.575380861 +0000 UTC m=+41.185309246 I0513 22:00:09.605606 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:00:09.605589513 +0000 UTC m=+41.215517868 I0513 22:00:09.634273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:00:09.634699 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:00:09.634693068 +0000 UTC m=+41.244621413 I0513 22:00:09.670361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:04:32.845428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:04:32.845575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-05-13 22:04:32.845563664 +0000 UTC m=+304.455492039 I0513 22:04:32.846257 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-05-13 22:04:32.846247953 +0000 UTC m=+304.456176338 I0513 22:04:32.868211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:04:32.868282 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-05-13 22:04:32.868273057 +0000 UTC m=+304.478201402 I0513 22:04:33.108059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:04:33.139199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-hgvjx" condition "Approved" to 2026-05-13 22:04:33.139188585 +0000 UTC m=+304.749116940 I0513 22:04:33.163111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-hgvjx" condition "Ready" to 2026-05-13 22:04:33.163100161 +0000 UTC m=+304.773028516 I0513 22:04:33.191479 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:04:33.191470614 +0000 UTC m=+304.801398969 I0513 22:04:33.218021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:05:37.379357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:05:37.379412 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-13 22:05:37.379395085 +0000 UTC m=+368.989323470 I0513 22:05:37.379846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-13 22:05:37.379232021 +0000 UTC m=+368.989160376 E0513 22:05:37.392919 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 22:05:37.392961 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-13 22:05:37.392952982 +0000 UTC m=+369.002881337 E0513 22:05:37.393010 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 22:05:37.393296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:05:37.393378 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-13 22:05:37.393359423 +0000 UTC m=+369.003287768 E0513 22:05:37.409361 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0513 22:05:37.409477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 22:05:37.409500 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 22:05:37.409605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0513 22:05:37.412434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:05:37.431173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lzf24" condition "Approved" to 2026-05-13 22:05:37.431158691 +0000 UTC m=+369.041087076 I0513 22:05:37.445976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lzf24" condition "Ready" to 2026-05-13 22:05:37.445965237 +0000 UTC m=+369.055893592 I0513 22:05:37.470077 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:05:37.470063745 +0000 UTC m=+369.079992100 I0513 22:05:37.487241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:05:37.487455 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:05:37.4874471 +0000 UTC m=+369.097375455 I0513 22:05:37.506080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:05:42.410166 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:05:42.410153839 +0000 UTC m=+374.020082214 I0513 22:06:20.880040 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-13 22:06:20.880014023 +0000 UTC m=+412.489942388 I0513 22:06:20.880141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:20.880188 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-13 22:06:20.880180766 +0000 UTC m=+412.490109121 I0513 22:06:20.888538 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-13 22:06:20.888524584 +0000 UTC m=+412.498452959 I0513 22:06:20.889106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:20.889126 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-13 22:06:20.889122446 +0000 UTC m=+412.499050791 I0513 22:06:20.890577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:20.890609 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-13 22:06:20.890605156 +0000 UTC m=+412.500533501 I0513 22:06:20.891133 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-13 22:06:20.891128247 +0000 UTC m=+412.501056592 I0513 22:06:20.909033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:20.909095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:20.909116 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-13 22:06:20.909110968 +0000 UTC m=+412.519039313 I0513 22:06:20.937934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:20.938007 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-13 22:06:20.93800015 +0000 UTC m=+412.547928495 I0513 22:06:20.944471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:20.944521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:20.944539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-13 22:06:20.944535331 +0000 UTC m=+412.554463676 I0513 22:06:21.125382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.144444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wxwqf" condition "Approved" to 2026-05-13 22:06:21.144435486 +0000 UTC m=+412.754363821 I0513 22:06:21.161736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wxwqf" condition "Ready" to 2026-05-13 22:06:21.161727364 +0000 UTC m=+412.771655699 I0513 22:06:21.197583 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:21.197570793 +0000 UTC m=+412.807499138 I0513 22:06:21.224851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.229838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.238179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glx6j" condition "Approved" to 2026-05-13 22:06:21.238170618 +0000 UTC m=+412.848098963 I0513 22:06:21.260259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glx6j" condition "Ready" to 2026-05-13 22:06:21.260245151 +0000 UTC m=+412.870173506 I0513 22:06:21.315643 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:21.315630292 +0000 UTC m=+412.925558677 I0513 22:06:21.317154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.442918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.519872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.520316 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:21.520306831 +0000 UTC m=+413.130235186 I0513 22:06:21.769856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wn897" condition "Approved" to 2026-05-13 22:06:21.76984381 +0000 UTC m=+413.379772165 I0513 22:06:21.821797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:21.964998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wn897" condition "Ready" to 2026-05-13 22:06:21.964982355 +0000 UTC m=+413.574910730 I0513 22:06:22.510261 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:22.510247394 +0000 UTC m=+414.120175749 I0513 22:06:22.534652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:22.535099 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:22.535091842 +0000 UTC m=+414.145020197 I0513 22:06:22.744470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:30.658888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:30.658940 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" condition "Issuing" to 2026-05-13 22:06:30.658927534 +0000 UTC m=+422.268855889 I0513 22:06:30.659523 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" condition "Ready" to 2026-05-13 22:06:30.659515016 +0000 UTC m=+422.269443381 I0513 22:06:30.673362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:30.673420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" condition "Ready" to 2026-05-13 22:06:30.673415119 +0000 UTC m=+422.283343474 I0513 22:06:30.906409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:30.963265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h4fg9-r997f" condition "Approved" to 2026-05-13 22:06:30.963256549 +0000 UTC m=+422.573184894 I0513 22:06:30.996188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h4fg9-r997f" condition "Ready" to 2026-05-13 22:06:30.996173065 +0000 UTC m=+422.606101450 I0513 22:06:31.206288 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:31.20626102 +0000 UTC m=+422.816189375 I0513 22:06:31.235117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:31.235494 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:31.235481133 +0000 UTC m=+422.845409488 I0513 22:06:31.256445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h4fg9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:47.615172 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-13 22:06:47.615143098 +0000 UTC m=+439.225071483 I0513 22:06:47.615840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:47.615875 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-13 22:06:47.615867201 +0000 UTC m=+439.225795586 I0513 22:06:47.634192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:47.634271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:06:47.634293 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-13 22:06:47.634287029 +0000 UTC m=+439.244215384 I0513 22:06:48.051472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6c987" condition "Approved" to 2026-05-13 22:06:48.051457724 +0000 UTC m=+439.661386079 I0513 22:06:48.073689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6c987" condition "Ready" to 2026-05-13 22:06:48.073678813 +0000 UTC m=+439.683607168 I0513 22:06:48.104607 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:06:48.104594756 +0000 UTC m=+439.714523131 I0513 22:06:48.122790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:06:48.181320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:08.402899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:10:08.402987 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-13 22:10:08.402976813 +0000 UTC m=+640.012905198 I0513 22:10:08.403047 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-13 22:10:08.403026554 +0000 UTC m=+640.012954929 I0513 22:10:08.421820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:08.422008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-13 22:10:08.421999693 +0000 UTC m=+640.031928068 I0513 22:10:08.655986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:08.698356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6wskx" condition "Approved" to 2026-05-13 22:10:08.69834084 +0000 UTC m=+640.308269185 I0513 22:10:08.716706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6wskx" condition "Ready" to 2026-05-13 22:10:08.716695851 +0000 UTC m=+640.326624196 I0513 22:10:08.743289 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:10:08.743282031 +0000 UTC m=+640.353210376 I0513 22:10:08.769937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:08.770262 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:10:08.770255059 +0000 UTC m=+640.380183414 I0513 22:10:08.792123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:49.716443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 22:10:49.716465 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-13 22:10:49.716435303 +0000 UTC m=+681.326363658 I0513 22:10:49.716495 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-13 22:10:49.716487974 +0000 UTC m=+681.326416329 I0513 22:10:49.739867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:49.739971 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-13 22:10:49.739961352 +0000 UTC m=+681.349889727 I0513 22:10:50.027666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:50.054245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wh9wj" condition "Approved" to 2026-05-13 22:10:50.054235543 +0000 UTC m=+681.664163888 I0513 22:10:50.075439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wh9wj" condition "Ready" to 2026-05-13 22:10:50.075429979 +0000 UTC m=+681.685358324 I0513 22:10:50.101916 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:10:50.10190408 +0000 UTC m=+681.711832425 I0513 22:10:50.124148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 22:10:50.124521 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 22:10:50.124493225 +0000 UTC m=+681.734421560 I0513 22:10:50.148162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"