I0529 05:44:55.453802 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0529 05:44:55.454136 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0529 05:44:55.454248 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0529 05:44:55.459661 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0529 05:44:55.460409 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0529 05:44:55.460924 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0529 05:44:55.460930 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0529 05:44:55.465414 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0529 05:44:55.479898 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0529 05:44:55.482967 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0529 05:44:55.483093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0529 05:44:55.486926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0529 05:44:55.490025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0529 05:44:55.495597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0529 05:44:55.496972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0529 05:44:55.498971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0529 05:44:55.501408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0529 05:44:55.503970 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0529 05:44:55.504025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0529 05:44:55.506625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0529 05:44:55.509390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0529 05:44:55.518243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0529 05:44:55.520569 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0529 05:44:55.520595 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0529 05:44:55.520757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0529 05:44:55.523091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0529 05:44:55.525671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0529 05:44:55.527897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0529 05:44:55.531128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0529 05:44:55.533224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0529 05:44:55.535822 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0529 05:44:55.535833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0529 05:44:55.536004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0529 05:44:55.539395 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.540073 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.543643 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.563893 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.576596 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.596903 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.612041 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.629008 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.631134 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:44:55.650489 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0529 05:45:10.126544 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-29 05:45:10.126498084 +0000 UTC m=+14.703711922 I0529 05:45:10.825559 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 05:45:10.825522639 +0000 UTC m=+15.402736497 I0529 05:45:10.825630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:45:10.825912 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-29 05:45:10.825898723 +0000 UTC m=+15.403112581 E0529 05:45:10.844615 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 05:45:10.844689 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-29 05:45:10.844669213 +0000 UTC m=+15.421883051 E0529 05:45:10.844798 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 05:45:10.853595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:10.853645 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 05:45:10.85364007 +0000 UTC m=+15.430853908 E0529 05:45:10.869143 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0529 05:45:10.869229 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 05:45:10.869258 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 05:45:10.869291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0529 05:45:10.874956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:10.875106 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-29 05:45:10.875094582 +0000 UTC m=+15.452308490 I0529 05:45:10.891296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bwpt8" condition "Approved" to 2026-05-29 05:45:10.891279531 +0000 UTC m=+15.468493399 I0529 05:45:10.914813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bwpt8" condition "Ready" to 2026-05-29 05:45:10.914794962 +0000 UTC m=+15.492008830 I0529 05:45:10.954417 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:45:10.95439965 +0000 UTC m=+15.531613508 I0529 05:45:10.975173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:10.975417 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:45:10.97541112 +0000 UTC m=+15.552624958 I0529 05:45:10.993376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:15.870297 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:45:15.870248453 +0000 UTC m=+20.447462311 I0529 05:45:36.214913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:45:36.214959 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 05:45:36.214939262 +0000 UTC m=+40.792153090 I0529 05:45:36.215274 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-29 05:45:36.215269505 +0000 UTC m=+40.792483333 I0529 05:45:36.229841 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-29 05:45:36.2298301 +0000 UTC m=+40.807043928 I0529 05:45:36.252221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:36.254778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:45:36.254812 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-29 05:45:36.254804755 +0000 UTC m=+40.832018593 I0529 05:45:36.615798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqxh7" condition "Approved" to 2026-05-29 05:45:36.615789122 +0000 UTC m=+41.193002960 I0529 05:45:36.662436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqxh7" condition "Ready" to 2026-05-29 05:45:36.662427113 +0000 UTC m=+41.239640941 I0529 05:45:36.693265 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:45:36.693255579 +0000 UTC m=+41.270469417 I0529 05:45:36.712863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:45:36.713140 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:45:36.7131345 +0000 UTC m=+41.290348338 I0529 05:45:36.732730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:49:52.178551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:49:52.178584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready" to 2026-05-29 05:49:52.178554266 +0000 UTC m=+296.755768094 I0529 05:49:52.178617 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Issuing" to 2026-05-29 05:49:52.178610587 +0000 UTC m=+296.755824445 I0529 05:49:52.196178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:49:52.196237 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready" to 2026-05-29 05:49:52.196229863 +0000 UTC m=+296.773443701 I0529 05:49:52.393251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:49:52.419205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-qcpcm" condition "Approved" to 2026-05-29 05:49:52.419188573 +0000 UTC m=+296.996402431 I0529 05:49:52.443583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-qcpcm" condition "Ready" to 2026-05-29 05:49:52.443571306 +0000 UTC m=+297.020785134 I0529 05:49:52.472099 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:49:52.472090221 +0000 UTC m=+297.049304039 I0529 05:49:52.488244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:49:52.488701 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:49:52.48869504 +0000 UTC m=+297.065908878 I0529 05:49:52.514193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:50:56.545856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:50:56.545921 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 05:50:56.545902685 +0000 UTC m=+361.123116533 I0529 05:50:56.546653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-29 05:50:56.546644517 +0000 UTC m=+361.123858365 E0529 05:50:56.562344 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 05:50:56.562381 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-29 05:50:56.56237532 +0000 UTC m=+361.139589158 E0529 05:50:56.562428 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0529 05:50:56.563168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:50:56.563224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:50:56.563243 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-29 05:50:56.563238534 +0000 UTC m=+361.140452372 E0529 05:50:56.579035 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0529 05:50:56.579109 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 05:50:56.579132 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0529 05:50:56.579167 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0529 05:50:56.608315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wg2kw" condition "Approved" to 2026-05-29 05:50:56.608305564 +0000 UTC m=+361.185519392 I0529 05:50:56.622846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wg2kw" condition "Ready" to 2026-05-29 05:50:56.62283257 +0000 UTC m=+361.200046408 I0529 05:50:56.643748 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:50:56.64372169 +0000 UTC m=+361.220935528 I0529 05:50:56.658153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:01.579936 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:01.579920699 +0000 UTC m=+366.157134527 I0529 05:51:42.010174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:42.031863 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-29 05:51:42.031857253 +0000 UTC m=+406.609071091 I0529 05:51:42.014551 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-29 05:51:42.014487334 +0000 UTC m=+406.591701172 I0529 05:51:42.016066 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-29 05:51:42.016051036 +0000 UTC m=+406.593264864 I0529 05:51:42.031328 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-29 05:51:42.031310805 +0000 UTC m=+406.608524643 I0529 05:51:42.034254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:42.034292 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-29 05:51:42.034281295 +0000 UTC m=+406.611495133 I0529 05:51:42.034937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:42.034959 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-29 05:51:42.034954895 +0000 UTC m=+406.612168733 I0529 05:51:42.088023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.088064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:42.088078 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-29 05:51:42.088073204 +0000 UTC m=+406.665287032 I0529 05:51:42.096851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.096963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:42.096994 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-29 05:51:42.096986746 +0000 UTC m=+406.674200574 I0529 05:51:42.097233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.097285 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-29 05:51:42.09727947 +0000 UTC m=+406.674493298 I0529 05:51:42.374689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.378476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pmmr6" condition "Approved" to 2026-05-29 05:51:42.378464197 +0000 UTC m=+406.955678015 I0529 05:51:42.409023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pmmr6" condition "Ready" to 2026-05-29 05:51:42.409014386 +0000 UTC m=+406.986228214 I0529 05:51:42.411046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w8jwj" condition "Approved" to 2026-05-29 05:51:42.411031854 +0000 UTC m=+406.988245672 I0529 05:51:42.436573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w8jwj" condition "Ready" to 2026-05-29 05:51:42.436557114 +0000 UTC m=+407.013770942 I0529 05:51:42.461576 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:42.461566337 +0000 UTC m=+407.038780165 I0529 05:51:42.478436 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:42.478420408 +0000 UTC m=+407.055634256 I0529 05:51:42.484610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.492962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.493427 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:42.493420043 +0000 UTC m=+407.070633881 I0529 05:51:42.517690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.544589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:42.652288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tprc8" condition "Approved" to 2026-05-29 05:51:42.652273473 +0000 UTC m=+407.229487301 I0529 05:51:42.802565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tprc8" condition "Ready" to 2026-05-29 05:51:42.802555805 +0000 UTC m=+407.379769623 I0529 05:51:43.445356 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:43.445345421 +0000 UTC m=+408.022559259 I0529 05:51:43.497232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:43.600635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:43.897486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:49.983590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:51:49.983593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Ready" to 2026-05-29 05:51:49.983571364 +0000 UTC m=+414.560785222 I0529 05:51:49.983649 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Issuing" to 2026-05-29 05:51:49.983630375 +0000 UTC m=+414.560844233 I0529 05:51:50.008802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:50.009084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Ready" to 2026-05-29 05:51:50.008904988 +0000 UTC m=+414.586118856 I0529 05:51:50.508166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:50.560462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vjx9p-bxf9z" condition "Approved" to 2026-05-29 05:51:50.560449454 +0000 UTC m=+415.137663292 I0529 05:51:50.579432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vjx9p-bxf9z" condition "Ready" to 2026-05-29 05:51:50.579421452 +0000 UTC m=+415.156635290 I0529 05:51:50.622278 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:50.622262782 +0000 UTC m=+415.199476620 I0529 05:51:50.639230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:50.639756 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:50.639747969 +0000 UTC m=+415.216961807 I0529 05:51:50.666923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:50.667520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:51:50.669602 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vjx9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:51:50.669593064 +0000 UTC m=+415.246806892 I0529 05:52:02.445009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:52:02.445069 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-29 05:52:02.445061157 +0000 UTC m=+427.022274985 I0529 05:52:02.445065 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-29 05:52:02.445046597 +0000 UTC m=+427.022260425 I0529 05:52:02.467967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:52:02.468089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:52:02.468117 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-29 05:52:02.468109365 +0000 UTC m=+427.045323203 I0529 05:52:02.689853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xcpkw" condition "Approved" to 2026-05-29 05:52:02.689840161 +0000 UTC m=+427.267054009 I0529 05:52:02.754913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xcpkw" condition "Ready" to 2026-05-29 05:52:02.754900158 +0000 UTC m=+427.332113996 I0529 05:52:02.809332 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:52:02.809315744 +0000 UTC m=+427.386529602 I0529 05:52:02.827821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:52:02.828068 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:52:02.828061123 +0000 UTC m=+427.405274961 I0529 05:52:02.854974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:11.725864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:55:11.725965 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-29 05:55:11.725955268 +0000 UTC m=+616.303169096 I0529 05:55:11.725792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-29 05:55:11.725769826 +0000 UTC m=+616.302983654 I0529 05:55:11.743898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:11.743991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-29 05:55:11.743983967 +0000 UTC m=+616.321197795 I0529 05:55:11.958017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:11.983239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kn7zl" condition "Approved" to 2026-05-29 05:55:11.983225636 +0000 UTC m=+616.560439474 I0529 05:55:12.005358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kn7zl" condition "Ready" to 2026-05-29 05:55:12.005348302 +0000 UTC m=+616.582562140 I0529 05:55:12.033659 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:12.033648559 +0000 UTC m=+616.610862397 I0529 05:55:12.054081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:12.054758 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:12.054750644 +0000 UTC m=+616.631964482 I0529 05:55:12.072713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:12.073613 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:12.073603181 +0000 UTC m=+616.650817019 I0529 05:55:49.928810 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 05:55:49.928771696 +0000 UTC m=+654.505985534 I0529 05:55:49.929453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0529 05:55:49.929578 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-29 05:55:49.929556395 +0000 UTC m=+654.506770253 I0529 05:55:49.968068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:49.968244 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-29 05:55:49.968234677 +0000 UTC m=+654.545448525 I0529 05:55:50.066784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:50.096268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ztgmf" condition "Approved" to 2026-05-29 05:55:50.096253152 +0000 UTC m=+654.673467020 I0529 05:55:50.116273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ztgmf" condition "Ready" to 2026-05-29 05:55:50.116262371 +0000 UTC m=+654.693476189 I0529 05:55:50.147383 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:50.147366737 +0000 UTC m=+654.724580565 I0529 05:55:50.169905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:50.170494 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:50.170477851 +0000 UTC m=+654.747691679 I0529 05:55:50.183946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0529 05:55:50.184240 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-29 05:55:50.184232578 +0000 UTC m=+654.761446416 I0529 05:55:50.184918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"