I0507 09:13:20.193558 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0507 09:13:20.193706 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0507 09:13:20.193820 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0507 09:13:20.198930 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0507 09:13:20.199541 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0507 09:13:20.199696 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0507 09:13:20.199780 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0507 09:13:20.206240 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0507 09:13:20.220897 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0507 09:13:20.225647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0507 09:13:20.227764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0507 09:13:20.230063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0507 09:13:20.235161 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0507 09:13:20.235384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0507 09:13:20.237388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0507 09:13:20.239316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0507 09:13:20.240976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0507 09:13:20.242459 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0507 09:13:20.242477 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0507 09:13:20.242484 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0507 09:13:20.242562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0507 09:13:20.244255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0507 09:13:20.247997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0507 09:13:20.254271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0507 09:13:20.258571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0507 09:13:20.258649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0507 09:13:20.261773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0507 09:13:20.263853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0507 09:13:20.265696 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0507 09:13:20.265733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0507 09:13:20.267827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0507 09:13:20.269899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0507 09:13:20.272203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0507 09:13:20.275376 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.275381 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.276129 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.291623 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.312816 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.326745 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.341935 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.359602 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.365557 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:20.380354 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0507 09:13:33.401231 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-07 09:13:33.401216492 +0000 UTC m=+13.238996654 I0507 09:13:34.163581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:13:34.163638 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 09:13:34.16363129 +0000 UTC m=+14.001411452 I0507 09:13:34.163933 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 09:13:34.163926996 +0000 UTC m=+14.001707158 E0507 09:13:34.177396 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 09:13:34.177448 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-07 09:13:34.177441866 +0000 UTC m=+14.015222028 E0507 09:13:34.177469 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 09:13:34.179445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:13:34.179494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:13:34.179511 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 09:13:34.179507189 +0000 UTC m=+14.017287351 E0507 09:13:34.192282 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0507 09:13:34.192360 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 09:13:34.192395 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 09:13:34.192446 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0507 09:13:34.229660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lqhz8" condition "Approved" to 2026-05-07 09:13:34.229651339 +0000 UTC m=+14.067431491 I0507 09:13:34.230672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:13:34.242685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lqhz8" condition "Ready" to 2026-05-07 09:13:34.242674369 +0000 UTC m=+14.080454531 I0507 09:13:34.264993 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:13:34.264981622 +0000 UTC m=+14.102761784 I0507 09:13:34.284533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:13:34.285248 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:13:34.285242442 +0000 UTC m=+14.123022594 I0507 09:13:34.300698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:13:39.193962 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:13:39.193904861 +0000 UTC m=+19.031685113 I0507 09:14:03.968228 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 09:14:03.968200497 +0000 UTC m=+43.805980659 I0507 09:14:03.968562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:14:03.968580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 09:14:03.968576894 +0000 UTC m=+43.806357046 I0507 09:14:03.984871 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-07 09:14:03.984837721 +0000 UTC m=+43.822617883 I0507 09:14:04.008228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:14:04.008328 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 09:14:04.008320667 +0000 UTC m=+43.846100809 I0507 09:14:04.275431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:14:04.315976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv9j6" condition "Approved" to 2026-05-07 09:14:04.315958935 +0000 UTC m=+44.153739097 I0507 09:14:04.348401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv9j6" condition "Ready" to 2026-05-07 09:14:04.348384305 +0000 UTC m=+44.186164477 I0507 09:14:04.383042 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:14:04.383026711 +0000 UTC m=+44.220806883 I0507 09:14:04.414568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:14:04.420689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:14:04.421962 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:14:04.421954107 +0000 UTC m=+44.259734249 I0507 09:14:04.431226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:14:04.432294 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:14:04.432211385 +0000 UTC m=+44.269991577 I0507 09:18:21.607667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-05-07 09:18:21.607650354 +0000 UTC m=+301.445430556 I0507 09:18:21.608349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:18:21.608384 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-05-07 09:18:21.608375896 +0000 UTC m=+301.446156078 I0507 09:18:21.624970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:18:21.625027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:18:21.625042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-05-07 09:18:21.625036277 +0000 UTC m=+301.462816449 I0507 09:18:21.773913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:18:21.777179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-2c9z7" condition "Approved" to 2026-05-07 09:18:21.777168324 +0000 UTC m=+301.614948486 I0507 09:18:21.805140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-2c9z7" condition "Ready" to 2026-05-07 09:18:21.805130179 +0000 UTC m=+301.642910341 I0507 09:18:21.829980 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:18:21.829971282 +0000 UTC m=+301.667751444 I0507 09:18:21.849803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:19:26.881528 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 09:19:26.881513525 +0000 UTC m=+366.719293677 I0507 09:19:26.881912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:19:26.881944 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 09:19:26.881940035 +0000 UTC m=+366.719720197 E0507 09:19:26.896101 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 09:19:26.896149 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-07 09:19:26.896142049 +0000 UTC m=+366.733922211 E0507 09:19:26.896191 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0507 09:19:26.896844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:19:26.896887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:19:26.896899 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 09:19:26.896895306 +0000 UTC m=+366.734675468 E0507 09:19:26.903760 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0507 09:19:26.904110 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 09:19:26.904177 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0507 09:19:26.904272 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0507 09:19:26.931419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:19:26.934857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hhvcg" condition "Approved" to 2026-05-07 09:19:26.934848411 +0000 UTC m=+366.772628563 I0507 09:19:26.946391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hhvcg" condition "Ready" to 2026-05-07 09:19:26.946319563 +0000 UTC m=+366.784099725 I0507 09:19:26.967564 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:19:26.967546907 +0000 UTC m=+366.805327099 I0507 09:19:26.988413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:19:27.029465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:19:31.905086 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:19:31.905075329 +0000 UTC m=+371.742855481 I0507 09:20:11.905823 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 09:20:11.905811296 +0000 UTC m=+411.743591448 I0507 09:20:11.905958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:11.906975 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 09:20:11.906947299 +0000 UTC m=+411.744727451 I0507 09:20:11.927607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:11.927636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 09:20:11.927629068 +0000 UTC m=+411.765409220 I0507 09:20:11.928764 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 09:20:11.9287502 +0000 UTC m=+411.766530372 I0507 09:20:11.935378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:11.935429 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 09:20:11.935421482 +0000 UTC m=+411.773201624 I0507 09:20:11.935496 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 09:20:11.935483343 +0000 UTC m=+411.773263495 I0507 09:20:11.940549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:11.944631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:11.944696 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 09:20:11.944685186 +0000 UTC m=+411.782465338 I0507 09:20:11.959310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:11.959374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:11.959393 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 09:20:11.959388217 +0000 UTC m=+411.797168369 I0507 09:20:11.988950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:11.989119 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 09:20:11.989111325 +0000 UTC m=+411.826891477 I0507 09:20:12.116071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:12.129492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w279n" condition "Approved" to 2026-05-07 09:20:12.129481337 +0000 UTC m=+411.967261489 I0507 09:20:12.155452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w279n" condition "Ready" to 2026-05-07 09:20:12.15543657 +0000 UTC m=+411.993216732 I0507 09:20:12.164300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxvjs" condition "Approved" to 2026-05-07 09:20:12.164288424 +0000 UTC m=+412.002068596 I0507 09:20:12.182980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxvjs" condition "Ready" to 2026-05-07 09:20:12.182965323 +0000 UTC m=+412.020745485 I0507 09:20:12.192452 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:12.19243487 +0000 UTC m=+412.030215042 I0507 09:20:12.215615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:12.224280 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:12.224271979 +0000 UTC m=+412.062052121 I0507 09:20:12.257559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:12.257852 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:12.257845721 +0000 UTC m=+412.095625873 I0507 09:20:12.359174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:12.663677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:12.724570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r5c5p" condition "Approved" to 2026-05-07 09:20:12.724555735 +0000 UTC m=+412.562335887 I0507 09:20:12.823619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r5c5p" condition "Ready" to 2026-05-07 09:20:12.823607011 +0000 UTC m=+412.661387183 I0507 09:20:13.265278 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:13.265266796 +0000 UTC m=+413.103046948 I0507 09:20:13.483981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:19.440226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" condition "Ready" to 2026-05-07 09:20:19.440212612 +0000 UTC m=+419.277992774 I0507 09:20:19.440599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:19.440660 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" condition "Issuing" to 2026-05-07 09:20:19.44064855 +0000 UTC m=+419.278428732 I0507 09:20:19.452852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-76v8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:19.452908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:19.452921 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" condition "Issuing" to 2026-05-07 09:20:19.452915698 +0000 UTC m=+419.290695860 I0507 09:20:19.690083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-76v8b-4p24c" condition "Approved" to 2026-05-07 09:20:19.690073081 +0000 UTC m=+419.527853223 I0507 09:20:19.714917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-76v8b-4p24c" condition "Ready" to 2026-05-07 09:20:19.714903672 +0000 UTC m=+419.552683854 I0507 09:20:19.747581 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:19.747569755 +0000 UTC m=+419.585349917 I0507 09:20:19.774430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-76v8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:20.038504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-76v8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-76v8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:39.077018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 09:20:39.077001902 +0000 UTC m=+438.914782054 I0507 09:20:39.077091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:20:39.077120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 09:20:39.077113824 +0000 UTC m=+438.914893976 I0507 09:20:39.100614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:39.100694 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 09:20:39.100688008 +0000 UTC m=+438.938468160 I0507 09:20:39.368105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:39.409558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rsbst" condition "Approved" to 2026-05-07 09:20:39.409546041 +0000 UTC m=+439.247326203 I0507 09:20:39.678459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rsbst" condition "Ready" to 2026-05-07 09:20:39.67844282 +0000 UTC m=+439.516222982 I0507 09:20:39.708517 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:20:39.708501593 +0000 UTC m=+439.546281755 I0507 09:20:39.741470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:20:39.792656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:11.388528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:24:11.388593 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 09:24:11.38858661 +0000 UTC m=+651.226366762 I0507 09:24:11.388979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 09:24:11.388973206 +0000 UTC m=+651.226753368 I0507 09:24:11.413029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:11.413146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:24:11.413180 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 09:24:11.413170959 +0000 UTC m=+651.250951151 I0507 09:24:11.577955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:11.585191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5p2n" condition "Approved" to 2026-05-07 09:24:11.585183722 +0000 UTC m=+651.422963874 I0507 09:24:11.603574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5p2n" condition "Ready" to 2026-05-07 09:24:11.603560676 +0000 UTC m=+651.441340828 I0507 09:24:11.647659 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:24:11.647646654 +0000 UTC m=+651.485426806 I0507 09:24:11.672780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:51.634170 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-07 09:24:51.634136165 +0000 UTC m=+691.471916347 I0507 09:24:51.634524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0507 09:24:51.634626 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 09:24:51.634619282 +0000 UTC m=+691.472399444 I0507 09:24:51.651814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:51.651957 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-07 09:24:51.651948066 +0000 UTC m=+691.489728248 I0507 09:24:52.058877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:52.090229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9rqf9" condition "Approved" to 2026-05-07 09:24:52.090217644 +0000 UTC m=+691.927997796 I0507 09:24:52.107901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9rqf9" condition "Ready" to 2026-05-07 09:24:52.107891262 +0000 UTC m=+691.945671414 I0507 09:24:52.137790 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:24:52.137777046 +0000 UTC m=+691.975557208 I0507 09:24:52.160773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:52.161081 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 09:24:52.16107531 +0000 UTC m=+691.998855472 I0507 09:24:52.169070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0507 09:24:52.185943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"