I0519 13:14:35.492388 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0519 13:14:35.492566 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0519 13:14:35.492762 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0519 13:14:35.497721 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0519 13:14:35.498143 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0519 13:14:35.498307 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0519 13:14:35.498325 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0519 13:14:35.501157 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0519 13:14:35.514004 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0519 13:14:35.518192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0519 13:14:35.523690 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0519 13:14:35.523761 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0519 13:14:35.526952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0519 13:14:35.530148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0519 13:14:35.532860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0519 13:14:35.535663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0519 13:14:35.538267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0519 13:14:35.543648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0519 13:14:35.546718 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0519 13:14:35.546792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0519 13:14:35.549341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0519 13:14:35.551796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0519 13:14:35.554413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0519 13:14:35.556817 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0519 13:14:35.556838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0519 13:14:35.556843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0519 13:14:35.556845 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0519 13:14:35.556865 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0519 13:14:35.558767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0519 13:14:35.560812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0519 13:14:35.562775 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0519 13:14:35.569209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0519 13:14:35.572359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0519 13:14:35.574226 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.574700 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.575038 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.575453 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.577201 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.577229 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.577458 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.577674 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.577930 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:35.659220 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 13:14:45.263950 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 13:14:45.263894702 +0000 UTC m=+9.803669678 I0519 13:14:46.018053 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 13:14:46.018036898 +0000 UTC m=+10.557811884 I0519 13:14:46.019058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:14:46.019091 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 13:14:46.019084575 +0000 UTC m=+10.558859561 I0519 13:14:46.034901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:14:46.035453 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 13:14:46.035443684 +0000 UTC m=+10.575218640 E0519 13:14:46.041376 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 13:14:46.041481 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 13:14:46.041469723 +0000 UTC m=+10.581244669 E0519 13:14:46.041519 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 13:14:46.057552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 13:14:46.058545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0519 13:14:46.058889 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 13:14:46.058982 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 13:14:46.059226 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 13:14:46.081994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rvdwp" condition "Approved" to 2026-05-19 13:14:46.081965647 +0000 UTC m=+10.621740603 I0519 13:14:46.095943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rvdwp" condition "Ready" to 2026-05-19 13:14:46.095927746 +0000 UTC m=+10.635702732 I0519 13:14:46.113087 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:14:46.113074667 +0000 UTC m=+10.652849613 I0519 13:14:46.129213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:14:46.172178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:14:51.058260 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:14:51.058242124 +0000 UTC m=+15.598017100 I0519 13:15:11.587245 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 13:15:11.587204962 +0000 UTC m=+36.126979918 I0519 13:15:11.587474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:15:11.587780 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 13:15:11.587760691 +0000 UTC m=+36.127535667 I0519 13:15:11.606325 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 13:15:11.606308056 +0000 UTC m=+36.146083042 I0519 13:15:11.608990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:15:11.609092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:15:11.609125 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 13:15:11.609119347 +0000 UTC m=+36.148894303 I0519 13:15:11.752116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z75lx" condition "Approved" to 2026-05-19 13:15:11.752099658 +0000 UTC m=+36.291874615 I0519 13:15:11.789903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z75lx" condition "Ready" to 2026-05-19 13:15:11.78989151 +0000 UTC m=+36.329666456 I0519 13:15:11.823851 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:15:11.823835173 +0000 UTC m=+36.363610119 I0519 13:15:11.843357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:15:11.895056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:19:24.043183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:19:24.043363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-05-19 13:19:24.043335155 +0000 UTC m=+288.583110131 I0519 13:19:24.043223 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-05-19 13:19:24.043213893 +0000 UTC m=+288.582988849 I0519 13:19:24.097149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:19:24.100812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:19:24.104770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-05-19 13:19:24.104760728 +0000 UTC m=+288.644535674 I0519 13:19:24.806739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-p5fcl" condition "Approved" to 2026-05-19 13:19:24.806718749 +0000 UTC m=+289.346493725 I0519 13:19:24.835879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-p5fcl" condition "Ready" to 2026-05-19 13:19:24.835870521 +0000 UTC m=+289.375645477 I0519 13:19:24.871331 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:19:24.871311941 +0000 UTC m=+289.411086917 I0519 13:19:24.892779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:19:24.893147 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:19:24.893141422 +0000 UTC m=+289.432916378 I0519 13:19:24.914179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:39.026287 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 13:20:39.025824559 +0000 UTC m=+363.565599505 I0519 13:20:39.029286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:20:39.029315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 13:20:39.029310165 +0000 UTC m=+363.569085111 E0519 13:20:39.069055 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 13:20:39.069098 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 13:20:39.069089442 +0000 UTC m=+363.608864378 E0519 13:20:39.069189 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 13:20:39.103937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:39.104135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:20:39.104170 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 13:20:39.104160501 +0000 UTC m=+363.643935477 E0519 13:20:39.114196 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0519 13:20:39.114462 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 13:20:39.114629 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 13:20:39.114729 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0519 13:20:39.147949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:39.153943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lv8nb" condition "Approved" to 2026-05-19 13:20:39.153928066 +0000 UTC m=+363.693703022 I0519 13:20:39.169901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lv8nb" condition "Ready" to 2026-05-19 13:20:39.169886176 +0000 UTC m=+363.709661132 I0519 13:20:39.195363 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:20:39.195355315 +0000 UTC m=+363.735130271 I0519 13:20:39.210844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:39.211107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:20:39.21109934 +0000 UTC m=+363.750874316 I0519 13:20:39.225545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:39.225573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:20:44.115176 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:20:44.115161894 +0000 UTC m=+368.654936860 I0519 13:21:28.597516 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 13:21:28.597464833 +0000 UTC m=+413.137239779 I0519 13:21:28.598120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:28.598159 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 13:21:28.598153355 +0000 UTC m=+413.137928301 I0519 13:21:28.601746 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 13:21:28.601732408 +0000 UTC m=+413.141507354 I0519 13:21:28.602066 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 13:21:28.602059654 +0000 UTC m=+413.141834610 I0519 13:21:28.602309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:28.602332 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 13:21:28.602328719 +0000 UTC m=+413.142103675 I0519 13:21:28.602463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:28.602600 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 13:21:28.602503552 +0000 UTC m=+413.142278498 I0519 13:21:28.626572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:28.626802 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 13:21:28.626790177 +0000 UTC m=+413.166565173 I0519 13:21:28.627422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:28.628102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 13:21:28.62809558 +0000 UTC m=+413.167870536 I0519 13:21:28.665786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:28.666001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:28.666031 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 13:21:28.666024113 +0000 UTC m=+413.205799069 I0519 13:21:28.825335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:28.874236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5k7qw" condition "Approved" to 2026-05-19 13:21:28.874222847 +0000 UTC m=+413.413997793 I0519 13:21:28.909525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5k7qw" condition "Ready" to 2026-05-19 13:21:28.909515364 +0000 UTC m=+413.449290310 I0519 13:21:28.950642 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:28.950624314 +0000 UTC m=+413.490399250 I0519 13:21:28.980138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:28.990671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:29.045450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-59vwn" condition "Approved" to 2026-05-19 13:21:29.044461625 +0000 UTC m=+413.584236571 I0519 13:21:29.068047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-59vwn" condition "Ready" to 2026-05-19 13:21:29.068032547 +0000 UTC m=+413.607807493 I0519 13:21:29.099305 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:29.099290174 +0000 UTC m=+413.639065120 I0519 13:21:29.143270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:29.143461 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:29.143455166 +0000 UTC m=+413.683230102 I0519 13:21:29.339200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jvwl2" condition "Approved" to 2026-05-19 13:21:29.339174697 +0000 UTC m=+413.878949643 I0519 13:21:29.445600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:29.485366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:29.544867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jvwl2" condition "Ready" to 2026-05-19 13:21:29.544847972 +0000 UTC m=+414.084622958 I0519 13:21:30.088312 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:30.088295279 +0000 UTC m=+414.628070235 I0519 13:21:30.184919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:30.487821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:44.719524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" condition "Ready" to 2026-05-19 13:21:44.719492855 +0000 UTC m=+429.259267831 I0519 13:21:44.719660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:44.719760 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" condition "Issuing" to 2026-05-19 13:21:44.719710619 +0000 UTC m=+429.259485565 I0519 13:21:44.734277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:44.734351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:21:44.734375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" condition "Issuing" to 2026-05-19 13:21:44.734370931 +0000 UTC m=+429.274145887 I0519 13:21:44.949460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hfpgs-rmqdk" condition "Approved" to 2026-05-19 13:21:44.949443805 +0000 UTC m=+429.489218761 I0519 13:21:44.966266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hfpgs-rmqdk" condition "Ready" to 2026-05-19 13:21:44.966254634 +0000 UTC m=+429.506029610 I0519 13:21:44.993498 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:44.993478731 +0000 UTC m=+429.533253687 I0519 13:21:45.018216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:21:45.019736 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:21:45.019725252 +0000 UTC m=+429.559500208 I0519 13:21:45.044367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfpgs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:22:00.961077 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 13:22:00.961058141 +0000 UTC m=+445.500833087 I0519 13:22:00.961408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:22:00.961425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 13:22:00.961422097 +0000 UTC m=+445.501197043 I0519 13:22:00.978891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:22:00.979285 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 13:22:00.979272559 +0000 UTC m=+445.519047525 I0519 13:22:01.166046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:22:01.194157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-58npv" condition "Approved" to 2026-05-19 13:22:01.194135335 +0000 UTC m=+445.733910291 I0519 13:22:01.229119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-58npv" condition "Ready" to 2026-05-19 13:22:01.229092695 +0000 UTC m=+445.768867641 I0519 13:22:01.264121 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:22:01.264109465 +0000 UTC m=+445.803884411 I0519 13:22:01.293974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:22:01.294395 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:22:01.294385136 +0000 UTC m=+445.834160092 I0519 13:22:01.309764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:22:01.310172 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:22:01.310143502 +0000 UTC m=+445.849918458 I0519 13:26:00.972726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:26:00.972833 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 13:26:00.97282117 +0000 UTC m=+685.512596146 I0519 13:26:00.972963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 13:26:00.972958485 +0000 UTC m=+685.512733431 I0519 13:26:00.989796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:00.989883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:26:00.989913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 13:26:00.989902986 +0000 UTC m=+685.529677942 I0519 13:26:01.187502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:01.195685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9cvxf" condition "Approved" to 2026-05-19 13:26:01.195627203 +0000 UTC m=+685.735402159 I0519 13:26:01.214312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9cvxf" condition "Ready" to 2026-05-19 13:26:01.21429607 +0000 UTC m=+685.754071026 I0519 13:26:01.253631 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:26:01.2536136 +0000 UTC m=+685.793388566 I0519 13:26:01.274365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:01.274743 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:26:01.274735682 +0000 UTC m=+685.814510628 I0519 13:26:01.303110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:42.209158 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-19 13:26:42.20913048 +0000 UTC m=+726.748905426 I0519 13:26:42.209545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:26:42.209566 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-19 13:26:42.209563766 +0000 UTC m=+726.749338712 I0519 13:26:42.228307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:42.228484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 13:26:42.228530 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-19 13:26:42.228519924 +0000 UTC m=+726.768294880 I0519 13:26:42.451993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6qn6p" condition "Approved" to 2026-05-19 13:26:42.451947042 +0000 UTC m=+726.991721988 I0519 13:26:42.472516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6qn6p" condition "Ready" to 2026-05-19 13:26:42.472503828 +0000 UTC m=+727.012278774 I0519 13:26:42.499540 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:26:42.499491404 +0000 UTC m=+727.039266360 I0519 13:26:42.515922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 13:26:42.516300 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 13:26:42.516289536 +0000 UTC m=+727.056064482 I0519 13:26:42.541974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"