I0501 14:05:25.858040 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0501 14:05:25.858144 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0501 14:05:25.858203 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0501 14:05:25.863753 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0501 14:05:25.864084 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0501 14:05:25.864186 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0501 14:05:25.864196 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0501 14:05:25.866634 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0501 14:05:25.882355 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0501 14:05:25.886854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0501 14:05:25.890619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0501 14:05:25.896056 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0501 14:05:25.896096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0501 14:05:25.896112 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0501 14:05:25.896319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0501 14:05:25.901871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0501 14:05:25.905707 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0501 14:05:25.905773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0501 14:05:25.907718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0501 14:05:25.909634 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0501 14:05:25.911444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0501 14:05:25.913397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0501 14:05:25.918778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0501 14:05:25.922448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0501 14:05:25.924886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0501 14:05:25.927323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0501 14:05:25.930052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0501 14:05:25.932760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0501 14:05:25.934841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0501 14:05:25.934967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0501 14:05:25.936803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0501 14:05:25.938633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0501 14:05:25.938826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0501 14:05:25.943710 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:25.944575 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:25.945015 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:25.959844 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:25.976235 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:25.989779 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:26.029590 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:26.035817 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:26.055886 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:26.075397 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 14:05:46.032386 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-01 14:05:46.032367551 +0000 UTC m=+20.205711941 I0501 14:05:46.739176 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-01 14:05:46.739163896 +0000 UTC m=+20.912508286 I0501 14:05:46.739255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:05:46.739346 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-01 14:05:46.739336551 +0000 UTC m=+20.912680951 I0501 14:05:46.753299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:05:46.753476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:05:46.753539 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-01 14:05:46.753532864 +0000 UTC m=+20.926877244 E0501 14:05:46.756748 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 14:05:46.756837 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-01 14:05:46.756830122 +0000 UTC m=+20.930174512 E0501 14:05:46.757510 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 14:05:46.769710 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0501 14:05:46.769945 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 14:05:46.769992 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 14:05:46.770785 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0501 14:05:46.792440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2xppc" condition "Approved" to 2026-05-01 14:05:46.792429378 +0000 UTC m=+20.965773768 I0501 14:05:46.811378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2xppc" condition "Ready" to 2026-05-01 14:05:46.811367977 +0000 UTC m=+20.984712367 I0501 14:05:46.831195 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:05:46.831182389 +0000 UTC m=+21.004526809 I0501 14:05:46.849944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:05:46.851376 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:05:46.85136479 +0000 UTC m=+21.024709180 I0501 14:05:46.883940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:05:46.887370 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:05:46.887354127 +0000 UTC m=+21.060698497 I0501 14:05:51.770251 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:05:51.770233092 +0000 UTC m=+25.943577502 I0501 14:06:13.065395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:06:13.065438 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-01 14:06:13.065429871 +0000 UTC m=+47.238774261 I0501 14:06:13.065394 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-01 14:06:13.0653777 +0000 UTC m=+47.238722090 I0501 14:06:13.076514 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-01 14:06:13.076504458 +0000 UTC m=+47.249848838 I0501 14:06:13.094460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:06:13.094564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:06:13.094603 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-01 14:06:13.094584045 +0000 UTC m=+47.267928425 I0501 14:06:13.317173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:06:13.327707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqvhb" condition "Approved" to 2026-05-01 14:06:13.32769458 +0000 UTC m=+47.501038990 I0501 14:06:13.355780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bqvhb" condition "Ready" to 2026-05-01 14:06:13.3557694 +0000 UTC m=+47.529113790 I0501 14:06:13.388652 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:06:13.388633429 +0000 UTC m=+47.561977849 I0501 14:06:13.418703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:06:13.475315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:10:19.141502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:10:19.141553 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-05-01 14:10:19.141546965 +0000 UTC m=+293.314891345 I0501 14:10:19.141539 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-05-01 14:10:19.141520724 +0000 UTC m=+293.314865144 I0501 14:10:19.159659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:10:19.159725 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-05-01 14:10:19.159717945 +0000 UTC m=+293.333062335 I0501 14:10:19.413891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:10:19.446692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-t5g4n" condition "Approved" to 2026-05-01 14:10:19.446651711 +0000 UTC m=+293.619996121 I0501 14:10:19.481871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-t5g4n" condition "Ready" to 2026-05-01 14:10:19.481840987 +0000 UTC m=+293.655185407 I0501 14:10:19.510162 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:10:19.510151044 +0000 UTC m=+293.683495434 I0501 14:10:19.530401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:10:19.530838 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:10:19.530830279 +0000 UTC m=+293.704174669 I0501 14:10:19.547148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:10:19.547395 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:10:19.54738309 +0000 UTC m=+293.720727480 I0501 14:11:23.921797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:11:23.921836 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-01 14:11:23.921826601 +0000 UTC m=+358.095170991 I0501 14:11:23.922136 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 14:11:23.922115818 +0000 UTC m=+358.095460268 E0501 14:11:23.934574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 14:11:23.934630 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-01 14:11:23.93462086 +0000 UTC m=+358.107965250 E0501 14:11:23.934687 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 14:11:23.960302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:11:23.961293 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 14:11:23.961279148 +0000 UTC m=+358.134623568 E0501 14:11:23.962128 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0501 14:11:23.963416 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 14:11:23.963581 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 14:11:23.963704 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0501 14:11:23.972906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:11:23.973963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 14:11:23.973954724 +0000 UTC m=+358.147299114 I0501 14:11:23.973201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5nl26" condition "Approved" to 2026-05-01 14:11:23.973187345 +0000 UTC m=+358.146531745 I0501 14:11:23.992351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5nl26" condition "Ready" to 2026-05-01 14:11:23.992337359 +0000 UTC m=+358.165681769 I0501 14:11:24.015106 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:11:24.015094804 +0000 UTC m=+358.188439194 I0501 14:11:24.036108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:11:24.036305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:11:24.03629718 +0000 UTC m=+358.209641570 I0501 14:11:24.052517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:11:28.962578 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:11:28.962563618 +0000 UTC m=+363.135908028 I0501 14:12:07.862561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:07.862665 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-01 14:12:07.86265929 +0000 UTC m=+402.036003680 I0501 14:12:07.863025 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-01 14:12:07.863021489 +0000 UTC m=+402.036365869 I0501 14:12:07.863282 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-01 14:12:07.863278565 +0000 UTC m=+402.036622945 I0501 14:12:07.863313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:07.863448 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-01 14:12:07.863444158 +0000 UTC m=+402.036788538 I0501 14:12:07.863620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:07.863633 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-01 14:12:07.863630324 +0000 UTC m=+402.036974704 I0501 14:12:07.863819 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-01 14:12:07.863815658 +0000 UTC m=+402.037160038 I0501 14:12:07.911473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:07.911539 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-01 14:12:07.911532832 +0000 UTC m=+402.084877222 I0501 14:12:07.911719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:07.911786 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-01 14:12:07.911779968 +0000 UTC m=+402.085124338 I0501 14:12:07.920358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:07.920461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:07.920492 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-01 14:12:07.920484605 +0000 UTC m=+402.093829015 I0501 14:12:07.990351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:08.034043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q2slc" condition "Approved" to 2026-05-01 14:12:08.034031802 +0000 UTC m=+402.207376182 I0501 14:12:08.072338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q2slc" condition "Ready" to 2026-05-01 14:12:08.072319101 +0000 UTC m=+402.245663501 I0501 14:12:08.090593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rgnpc" condition "Approved" to 2026-05-01 14:12:08.090582495 +0000 UTC m=+402.263926895 I0501 14:12:08.100965 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:08.10095058 +0000 UTC m=+402.274294970 I0501 14:12:08.106558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rgnpc" condition "Ready" to 2026-05-01 14:12:08.106547883 +0000 UTC m=+402.279892283 I0501 14:12:08.126675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:08.137252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:08.137882 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:08.137867436 +0000 UTC m=+402.311211816 I0501 14:12:08.255772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:08.363124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-74vpv" condition "Approved" to 2026-05-01 14:12:08.363112851 +0000 UTC m=+402.536457221 I0501 14:12:08.611283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-74vpv" condition "Ready" to 2026-05-01 14:12:08.611270389 +0000 UTC m=+402.784614779 I0501 14:12:09.254995 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:09.254986155 +0000 UTC m=+403.428330525 I0501 14:12:09.406631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:09.407080 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:09.407072148 +0000 UTC m=+403.580416568 I0501 14:12:09.455708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:09.705343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:09.758882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.410179 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Ready" to 2026-05-01 14:12:14.410157384 +0000 UTC m=+408.583501774 I0501 14:12:14.410279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:14.410320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Issuing" to 2026-05-01 14:12:14.410309437 +0000 UTC m=+408.583653857 I0501 14:12:14.425173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.425242 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Ready" to 2026-05-01 14:12:14.425235239 +0000 UTC m=+408.598579629 I0501 14:12:14.611397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.651030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmdxx-gm6bb" condition "Approved" to 2026-05-01 14:12:14.651016495 +0000 UTC m=+408.824360885 I0501 14:12:14.676024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nmdxx-gm6bb" condition "Ready" to 2026-05-01 14:12:14.676015104 +0000 UTC m=+408.849359474 I0501 14:12:14.699196 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:14.699182549 +0000 UTC m=+408.872526919 I0501 14:12:14.718825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.719099 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:14.719091377 +0000 UTC m=+408.892435767 I0501 14:12:14.725054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.746648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.747425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:14.747731 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nmdxx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:14.747725119 +0000 UTC m=+408.921069499 I0501 14:12:28.400607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-01 14:12:28.400592556 +0000 UTC m=+422.573936946 I0501 14:12:28.400845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:28.400877 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-01 14:12:28.400869732 +0000 UTC m=+422.574214102 I0501 14:12:28.420307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:12:28.420379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:12:28.420403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-01 14:12:28.420396242 +0000 UTC m=+422.593740632 I0501 14:12:28.583115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j4lxh" condition "Approved" to 2026-05-01 14:12:28.583099958 +0000 UTC m=+422.756444348 I0501 14:12:28.600722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j4lxh" condition "Ready" to 2026-05-01 14:12:28.600712813 +0000 UTC m=+422.774057183 I0501 14:12:28.639186 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:12:28.639173979 +0000 UTC m=+422.812518369 I0501 14:12:28.655908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:15:44.628199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-01 14:15:44.628174074 +0000 UTC m=+618.801518494 I0501 14:15:44.628365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:15:44.628390 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-01 14:15:44.628384548 +0000 UTC m=+618.801728928 I0501 14:15:44.646999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:15:44.647094 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-01 14:15:44.647085577 +0000 UTC m=+618.820429967 I0501 14:15:45.067300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:15:45.098206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lmlmm" condition "Approved" to 2026-05-01 14:15:45.098192959 +0000 UTC m=+619.271537339 I0501 14:15:45.117188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lmlmm" condition "Ready" to 2026-05-01 14:15:45.117147294 +0000 UTC m=+619.290491684 I0501 14:15:45.145367 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:15:45.145356311 +0000 UTC m=+619.318700691 I0501 14:15:45.167389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:15:45.167736 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:15:45.167729694 +0000 UTC m=+619.341074084 I0501 14:15:45.192617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:15:45.192925 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:15:45.192917022 +0000 UTC m=+619.366261402 I0501 14:15:45.195202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:16:26.947774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:16:26.947831 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-01 14:16:26.947825364 +0000 UTC m=+661.121169754 I0501 14:16:26.948128 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-01 14:16:26.948121981 +0000 UTC m=+661.121466371 I0501 14:16:26.967145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 14:16:26.967207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 14:16:26.967225 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-01 14:16:26.967219023 +0000 UTC m=+661.140563403 I0501 14:16:27.221867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vl74z" condition "Approved" to 2026-05-01 14:16:27.221858915 +0000 UTC m=+661.395203295 I0501 14:16:27.236628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vl74z" condition "Ready" to 2026-05-01 14:16:27.236618393 +0000 UTC m=+661.409962773 I0501 14:16:27.261738 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 14:16:27.261722783 +0000 UTC m=+661.435067163 I0501 14:16:27.282502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"