I0504 18:49:21.488189 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0504 18:49:21.488490 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0504 18:49:21.488636 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0504 18:49:21.494477 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0504 18:49:21.495120 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0504 18:49:21.495218 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0504 18:49:21.495235 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0504 18:49:21.499226 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0504 18:49:21.517028 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0504 18:49:21.521167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0504 18:49:21.523686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0504 18:49:21.526543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0504 18:49:21.529055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0504 18:49:21.532862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0504 18:49:21.536655 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0504 18:49:21.536755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0504 18:49:21.538986 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0504 18:49:21.541320 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0504 18:49:21.541505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0504 18:49:21.543753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0504 18:49:21.546063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0504 18:49:21.548219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0504 18:49:21.549812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0504 18:49:21.549829 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0504 18:49:21.549865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0504 18:49:21.557352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0504 18:49:21.561255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0504 18:49:21.564679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0504 18:49:21.566936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0504 18:49:21.568701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0504 18:49:21.570425 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0504 18:49:21.570444 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0504 18:49:21.571207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0504 18:49:21.572710 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.573433 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.573661 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.574544 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.574881 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.575071 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.575682 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.576034 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.576570 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:21.656226 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 18:49:34.528177 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-04 18:49:34.528152649 +0000 UTC m=+13.070157868 I0504 18:49:35.237901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:49:35.238005 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 18:49:35.237988792 +0000 UTC m=+13.779994011 I0504 18:49:35.238158 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 18:49:35.238145345 +0000 UTC m=+13.780150534 I0504 18:49:35.255451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:49:35.255615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:49:35.255641 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 18:49:35.255634487 +0000 UTC m=+13.797639666 E0504 18:49:35.260191 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 18:49:35.260245 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-04 18:49:35.260239652 +0000 UTC m=+13.802244831 E0504 18:49:35.260263 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:49:35.272964 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0504 18:49:35.276471 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:49:35.276521 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:49:35.276739 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0504 18:49:35.295217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:49:35.295824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-npffc" condition "Approved" to 2026-05-04 18:49:35.295816087 +0000 UTC m=+13.837821276 I0504 18:49:35.317755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-npffc" condition "Ready" to 2026-05-04 18:49:35.31774268 +0000 UTC m=+13.859747899 I0504 18:49:35.340636 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:49:35.340620103 +0000 UTC m=+13.882625322 I0504 18:49:35.354575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:49:40.274058 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:49:40.274045026 +0000 UTC m=+18.816050245 I0504 18:50:02.699205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:50:02.699309 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 18:50:02.699271215 +0000 UTC m=+41.241276394 I0504 18:50:02.699873 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 18:50:02.699230354 +0000 UTC m=+41.241235543 I0504 18:50:02.712362 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-04 18:50:02.712347767 +0000 UTC m=+41.254352946 I0504 18:50:02.723191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:50:02.723327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:50:02.723410 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 18:50:02.723403232 +0000 UTC m=+41.265408421 I0504 18:50:03.324568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:50:03.336243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rqxpf" condition "Approved" to 2026-05-04 18:50:03.336234636 +0000 UTC m=+41.878239825 I0504 18:50:03.370068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rqxpf" condition "Ready" to 2026-05-04 18:50:03.370053789 +0000 UTC m=+41.912058978 I0504 18:50:03.396232 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:50:03.396217514 +0000 UTC m=+41.938222703 I0504 18:50:03.415865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:54:15.326921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:54:15.327013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Issuing" to 2026-05-04 18:54:15.326943849 +0000 UTC m=+293.868949038 I0504 18:54:15.327054 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready" to 2026-05-04 18:54:15.327030422 +0000 UTC m=+293.869035601 I0504 18:54:15.344025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:54:15.344155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:54:15.344205 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Issuing" to 2026-05-04 18:54:15.344198539 +0000 UTC m=+293.886203708 I0504 18:54:15.488085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-235.nip.io-tls-kgksk" condition "Approved" to 2026-05-04 18:54:15.488072552 +0000 UTC m=+294.030077741 I0504 18:54:15.515198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-235.nip.io-tls-kgksk" condition "Ready" to 2026-05-04 18:54:15.515184465 +0000 UTC m=+294.057189674 I0504 18:54:15.542750 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:54:15.542738983 +0000 UTC m=+294.084744172 I0504 18:54:15.561717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:54:15.562035 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:54:15.562028047 +0000 UTC m=+294.104033236 I0504 18:54:15.580242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:55:20.097931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:55:20.098171 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 18:55:20.097946754 +0000 UTC m=+358.639951933 I0504 18:55:20.099089 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 18:55:20.097962984 +0000 UTC m=+358.639968193 I0504 18:55:20.115878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:55:20.115970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:55:20.115997 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 18:55:20.115989329 +0000 UTC m=+358.657994538 E0504 18:55:20.117693 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 18:55:20.117845 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-04 18:55:20.117833198 +0000 UTC m=+358.659838387 E0504 18:55:20.118020 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:55:20.130693 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0504 18:55:20.130874 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:55:20.131000 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 18:55:20.131124 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0504 18:55:20.173104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nxblk" condition "Approved" to 2026-05-04 18:55:20.173094829 +0000 UTC m=+358.715100008 I0504 18:55:20.212642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nxblk" condition "Ready" to 2026-05-04 18:55:20.212633291 +0000 UTC m=+358.754638460 I0504 18:55:20.236018 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:55:20.236001748 +0000 UTC m=+358.778006967 I0504 18:55:20.249809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:55:25.131782 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:55:25.131768049 +0000 UTC m=+363.673773238 I0504 18:56:04.460820 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 18:56:04.460782063 +0000 UTC m=+403.002787242 I0504 18:56:04.461107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:04.461131 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 18:56:04.461127384 +0000 UTC m=+403.003132563 I0504 18:56:04.472482 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 18:56:04.472460504 +0000 UTC m=+403.014465683 I0504 18:56:04.472828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:04.472847 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 18:56:04.472844107 +0000 UTC m=+403.014849286 I0504 18:56:04.473272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:04.473336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 18:56:04.473327043 +0000 UTC m=+403.015332222 I0504 18:56:04.473280 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 18:56:04.473262791 +0000 UTC m=+403.015267970 I0504 18:56:04.493152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.493414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:04.493459 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 18:56:04.49345091 +0000 UTC m=+403.035456089 I0504 18:56:04.508513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.508587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 18:56:04.508576534 +0000 UTC m=+403.050581723 I0504 18:56:04.526389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.526520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 18:56:04.526512029 +0000 UTC m=+403.068517208 I0504 18:56:04.603353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.642088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-24pnk" condition "Approved" to 2026-05-04 18:56:04.642072003 +0000 UTC m=+403.184077182 I0504 18:56:04.652447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.659916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-24pnk" condition "Ready" to 2026-05-04 18:56:04.659909396 +0000 UTC m=+403.201914575 I0504 18:56:04.692015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pt2sh" condition "Approved" to 2026-05-04 18:56:04.692000994 +0000 UTC m=+403.234006213 I0504 18:56:04.703208 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:04.703198229 +0000 UTC m=+403.245203408 I0504 18:56:04.723125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pt2sh" condition "Ready" to 2026-05-04 18:56:04.72311667 +0000 UTC m=+403.265121849 I0504 18:56:04.728277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.737525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:04.797763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z5scf" condition "Approved" to 2026-05-04 18:56:04.797751697 +0000 UTC m=+403.339756876 I0504 18:56:04.862587 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:04.862574564 +0000 UTC m=+403.404579753 I0504 18:56:04.959977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z5scf" condition "Ready" to 2026-05-04 18:56:04.959966454 +0000 UTC m=+403.501971643 I0504 18:56:05.370978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:05.375129 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:05.375105582 +0000 UTC m=+403.917110761 I0504 18:56:05.775242 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:05.775226929 +0000 UTC m=+404.317232108 I0504 18:56:05.910182 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:05.910171737 +0000 UTC m=+404.452176906 I0504 18:56:06.013699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:06.015678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:06.053790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:06.099127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:06.199709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:06.200129 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:06.200118177 +0000 UTC m=+404.742123366 I0504 18:56:06.603323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:14.069045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" condition "Ready" to 2026-05-04 18:56:14.069014669 +0000 UTC m=+412.611019848 I0504 18:56:14.069060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:14.069155 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" condition "Issuing" to 2026-05-04 18:56:14.069147434 +0000 UTC m=+412.611152613 I0504 18:56:14.083099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:14.083166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:14.083182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" condition "Issuing" to 2026-05-04 18:56:14.083176562 +0000 UTC m=+412.625181741 I0504 18:56:14.220735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cn7nx-k659p" condition "Approved" to 2026-05-04 18:56:14.22072428 +0000 UTC m=+412.762729449 I0504 18:56:14.254368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cn7nx-k659p" condition "Ready" to 2026-05-04 18:56:14.25435729 +0000 UTC m=+412.796362469 I0504 18:56:14.318777 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:14.318768986 +0000 UTC m=+412.860774155 I0504 18:56:14.363119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:14.416754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cn7nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:29.008512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:56:29.008556 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 18:56:29.00853382 +0000 UTC m=+427.550538999 I0504 18:56:29.008736 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 18:56:29.008718986 +0000 UTC m=+427.550724165 I0504 18:56:29.025690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:29.025771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 18:56:29.025763395 +0000 UTC m=+427.567768584 I0504 18:56:29.199911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:29.226044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g4pvq" condition "Approved" to 2026-05-04 18:56:29.226028666 +0000 UTC m=+427.768033855 I0504 18:56:29.244745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g4pvq" condition "Ready" to 2026-05-04 18:56:29.244733479 +0000 UTC m=+427.786738658 I0504 18:56:29.272566 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:29.27254984 +0000 UTC m=+427.814555029 I0504 18:56:29.298721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:29.298999 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:56:29.298992146 +0000 UTC m=+427.840997325 I0504 18:56:29.307995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:56:29.316928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:59:52.689762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 18:59:52.689739802 +0000 UTC m=+631.231745011 I0504 18:59:52.690139 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:59:52.690178 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 18:59:52.690168704 +0000 UTC m=+631.232173893 I0504 18:59:52.706473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:59:52.706603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 18:59:52.706665 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 18:59:52.706657849 +0000 UTC m=+631.248663038 I0504 18:59:53.150190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zg9ml" condition "Approved" to 2026-05-04 18:59:53.150163436 +0000 UTC m=+631.692168625 I0504 18:59:53.164104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zg9ml" condition "Ready" to 2026-05-04 18:59:53.164091999 +0000 UTC m=+631.706097188 I0504 18:59:53.192348 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:59:53.192330846 +0000 UTC m=+631.734336015 I0504 18:59:53.206810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 18:59:53.207299 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 18:59:53.207292188 +0000 UTC m=+631.749297377 I0504 18:59:53.229562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 19:00:44.937335 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-04 19:00:44.937319312 +0000 UTC m=+683.479324501 I0504 19:00:44.937712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 19:00:44.937770 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-04 19:00:44.937765245 +0000 UTC m=+683.479770434 I0504 19:00:44.959229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 19:00:44.959371 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-04 19:00:44.959361051 +0000 UTC m=+683.501366240 I0504 19:00:45.284028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 19:00:45.318057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kv2qg" condition "Approved" to 2026-05-04 19:00:45.318045976 +0000 UTC m=+683.860051155 I0504 19:00:45.340830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kv2qg" condition "Ready" to 2026-05-04 19:00:45.340819136 +0000 UTC m=+683.882824325 I0504 19:00:45.371663 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 19:00:45.37164765 +0000 UTC m=+683.913652839 I0504 19:00:45.397316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"