I0525 00:38:28.499184 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0525 00:38:28.499303 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0525 00:38:28.499559 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0525 00:38:28.504255 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0525 00:38:28.504688 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0525 00:38:28.504733 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0525 00:38:28.504765 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0525 00:38:28.507439 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0525 00:38:28.519540 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0525 00:38:28.523036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0525 00:38:28.527228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0525 00:38:28.532556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0525 00:38:28.536681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0525 00:38:28.540186 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0525 00:38:28.540205 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0525 00:38:28.540212 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0525 00:38:28.540312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0525 00:38:28.542206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0525 00:38:28.543934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0525 00:38:28.545664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0525 00:38:28.547640 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0525 00:38:28.547924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0525 00:38:28.553079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0525 00:38:28.555413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0525 00:38:28.557601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0525 00:38:28.559836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0525 00:38:28.559862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0525 00:38:28.559965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0525 00:38:28.562545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0525 00:38:28.564752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0525 00:38:28.566350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0525 00:38:28.568150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0525 00:38:28.571363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0525 00:38:28.575894 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.576291 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.576428 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.576681 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.589623 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.601653 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.618223 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.631365 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.646799 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:28.672317 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0525 00:38:38.724385 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-25 00:38:38.724369149 +0000 UTC m=+10.280472045 I0525 00:38:39.408452 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-25 00:38:39.408439886 +0000 UTC m=+10.964542762 I0525 00:38:39.409700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:38:39.409804 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 00:38:39.40979623 +0000 UTC m=+10.965899126 E0525 00:38:39.424483 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 00:38:39.424551 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-25 00:38:39.424542334 +0000 UTC m=+10.980645210 E0525 00:38:39.424581 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 00:38:39.427876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:38:39.427945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:38:39.427963 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-25 00:38:39.427957633 +0000 UTC m=+10.984060509 E0525 00:38:39.438691 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0525 00:38:39.438886 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 00:38:39.438921 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 00:38:39.438993 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0525 00:38:39.466490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:38:39.469831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-csw5k" condition "Approved" to 2026-05-25 00:38:39.469821504 +0000 UTC m=+11.025924370 I0525 00:38:39.484287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-csw5k" condition "Ready" to 2026-05-25 00:38:39.484277121 +0000 UTC m=+11.040379987 I0525 00:38:39.514419 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:38:39.514404012 +0000 UTC m=+11.070506918 I0525 00:38:39.530945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:38:39.531322 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:38:39.531301231 +0000 UTC m=+11.087404107 I0525 00:38:39.548088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:38:39.548961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:38:44.439284 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:38:44.439270641 +0000 UTC m=+15.995373537 I0525 00:39:04.996593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:39:04.996969 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-25 00:39:04.996958785 +0000 UTC m=+36.553061691 I0525 00:39:04.996682 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 00:39:04.996642752 +0000 UTC m=+36.552745648 I0525 00:39:05.027484 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-25 00:39:05.027469488 +0000 UTC m=+36.583572384 I0525 00:39:05.030651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:39:05.030732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:39:05.030767 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-25 00:39:05.030762712 +0000 UTC m=+36.586865578 I0525 00:39:05.243403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z2n7z" condition "Approved" to 2026-05-25 00:39:05.242491248 +0000 UTC m=+36.798594164 I0525 00:39:05.325550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z2n7z" condition "Ready" to 2026-05-25 00:39:05.325535762 +0000 UTC m=+36.881638658 I0525 00:39:05.405339 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:39:05.405325054 +0000 UTC m=+36.961427950 I0525 00:39:05.454076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:39:05.454355 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:39:05.454347264 +0000 UTC m=+37.010450150 I0525 00:39:05.495976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:19.728843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:43:19.728930 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Issuing" to 2026-05-25 00:43:19.728905772 +0000 UTC m=+291.285008678 I0525 00:43:19.729641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-05-25 00:43:19.729629808 +0000 UTC m=+291.285732724 I0525 00:43:19.762779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:19.763157 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-05-25 00:43:19.763116657 +0000 UTC m=+291.319219533 I0525 00:43:19.985719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:20.005369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-626tm" condition "Approved" to 2026-05-25 00:43:20.00536128 +0000 UTC m=+291.561464146 I0525 00:43:20.033684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-626tm" condition "Ready" to 2026-05-25 00:43:20.033669059 +0000 UTC m=+291.589771965 I0525 00:43:20.063664 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:43:20.063653542 +0000 UTC m=+291.619756418 I0525 00:43:20.088597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:20.088945 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:43:20.088938298 +0000 UTC m=+291.645041174 I0525 00:43:20.117165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:20.123722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:43:20.124288 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:43:20.124269033 +0000 UTC m=+291.680371939 I0525 00:44:23.588120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-25 00:44:23.588068045 +0000 UTC m=+355.144170951 I0525 00:44:23.588312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:44:23.588356 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-25 00:44:23.588348252 +0000 UTC m=+355.144451118 E0525 00:44:23.601143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 00:44:23.601188 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-25 00:44:23.601180822 +0000 UTC m=+355.157283688 E0525 00:44:23.601452 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0525 00:44:23.605798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:44:23.605924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:44:23.606768 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-25 00:44:23.606752992 +0000 UTC m=+355.162855898 E0525 00:44:23.613752 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0525 00:44:23.613866 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 00:44:23.613892 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0525 00:44:23.613965 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0525 00:44:23.639588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:44:23.643399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-45z2r" condition "Approved" to 2026-05-25 00:44:23.643385046 +0000 UTC m=+355.199487952 I0525 00:44:23.653974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-45z2r" condition "Ready" to 2026-05-25 00:44:23.653962903 +0000 UTC m=+355.210065779 I0525 00:44:23.671383 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:44:23.671375349 +0000 UTC m=+355.227478225 I0525 00:44:23.686076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:44:23.723635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:44:28.614409 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:44:28.614385483 +0000 UTC m=+360.170488379 I0525 00:45:07.599820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:07.599868 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-25 00:45:07.599849009 +0000 UTC m=+399.155951885 I0525 00:45:07.600090 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-25 00:45:07.600077047 +0000 UTC m=+399.156179913 I0525 00:45:07.600258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:07.600280 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-25 00:45:07.600275572 +0000 UTC m=+399.156378448 I0525 00:45:07.600421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:07.600437 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-25 00:45:07.600434628 +0000 UTC m=+399.156537504 I0525 00:45:07.600498 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-25 00:45:07.600495719 +0000 UTC m=+399.156598595 I0525 00:45:07.600436 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 00:45:07.600422287 +0000 UTC m=+399.156525153 I0525 00:45:07.648732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:07.648986 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-25 00:45:07.648979285 +0000 UTC m=+399.205082151 I0525 00:45:07.649374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:07.649855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:07.649863 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-25 00:45:07.649849912 +0000 UTC m=+399.205952808 I0525 00:45:07.652147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:07.652175 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-25 00:45:07.652168901 +0000 UTC m=+399.208271767 I0525 00:45:07.881411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:07.921331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:07.924372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nc779" condition "Approved" to 2026-05-25 00:45:07.924365176 +0000 UTC m=+399.480468052 I0525 00:45:07.946364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nc779" condition "Ready" to 2026-05-25 00:45:07.946354514 +0000 UTC m=+399.502457390 I0525 00:45:07.980745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8kcrz" condition "Approved" to 2026-05-25 00:45:07.98073613 +0000 UTC m=+399.536838996 I0525 00:45:07.996146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-48s96" condition "Approved" to 2026-05-25 00:45:07.996099498 +0000 UTC m=+399.552202354 I0525 00:45:07.997001 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:07.996994065 +0000 UTC m=+399.553096941 I0525 00:45:08.014964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8kcrz" condition "Ready" to 2026-05-25 00:45:08.014955374 +0000 UTC m=+399.571058240 I0525 00:45:08.025930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-48s96" condition "Ready" to 2026-05-25 00:45:08.025919469 +0000 UTC m=+399.582022345 I0525 00:45:08.031212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:08.031462 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:08.031457368 +0000 UTC m=+399.587560234 I0525 00:45:08.486922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:08.532397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0525 00:45:08.578850 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-rw5l7\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0525 00:45:08.690972 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:08.690957136 +0000 UTC m=+400.247060002 I0525 00:45:08.784166 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:08.784151665 +0000 UTC m=+400.340254541 I0525 00:45:08.938202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:09.033536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:09.033993 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:09.033985365 +0000 UTC m=+400.590088241 I0525 00:45:09.383556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:09.432624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:15.701465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:15.701507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" condition "Issuing" to 2026-05-25 00:45:15.701497403 +0000 UTC m=+407.257600309 I0525 00:45:15.701774 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" condition "Ready" to 2026-05-25 00:45:15.701759431 +0000 UTC m=+407.257862297 I0525 00:45:15.720405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:15.720479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" condition "Ready" to 2026-05-25 00:45:15.72047062 +0000 UTC m=+407.276573486 I0525 00:45:15.968607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:15.995684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qnzbl-pg25p" condition "Approved" to 2026-05-25 00:45:15.995669304 +0000 UTC m=+407.551772210 I0525 00:45:16.013660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qnzbl-pg25p" condition "Ready" to 2026-05-25 00:45:16.013648342 +0000 UTC m=+407.569751218 I0525 00:45:16.050275 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:16.050259558 +0000 UTC m=+407.606362454 I0525 00:45:16.080342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:16.080753 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:16.080743582 +0000 UTC m=+407.636846458 I0525 00:45:16.103855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qnzbl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:29.301466 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-25 00:45:29.301446647 +0000 UTC m=+420.857549543 I0525 00:45:29.301524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:45:29.301766 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-25 00:45:29.301755727 +0000 UTC m=+420.857858603 I0525 00:45:29.316468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:29.316776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-25 00:45:29.316752034 +0000 UTC m=+420.872854910 I0525 00:45:29.599938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:45:29.636008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5wqq2" condition "Approved" to 2026-05-25 00:45:29.635993252 +0000 UTC m=+421.192096128 I0525 00:45:29.656046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5wqq2" condition "Ready" to 2026-05-25 00:45:29.656034516 +0000 UTC m=+421.212137392 I0525 00:45:29.693970 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:45:29.693957404 +0000 UTC m=+421.250060280 I0525 00:45:29.720462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:48:39.293594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:48:39.293680 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-25 00:48:39.293645498 +0000 UTC m=+610.849748374 I0525 00:48:39.294051 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-25 00:48:39.294033726 +0000 UTC m=+610.850136632 I0525 00:48:39.313804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:48:39.313907 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-25 00:48:39.313897037 +0000 UTC m=+610.869999913 I0525 00:48:39.637493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:48:39.666576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6nw4r" condition "Approved" to 2026-05-25 00:48:39.66656112 +0000 UTC m=+611.222663996 I0525 00:48:39.693690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6nw4r" condition "Ready" to 2026-05-25 00:48:39.693679374 +0000 UTC m=+611.249782240 I0525 00:48:39.724828 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:48:39.724813167 +0000 UTC m=+611.280916043 I0525 00:48:39.745994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:48:39.747781 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:48:39.747773856 +0000 UTC m=+611.303876732 I0525 00:48:39.768432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:48:39.770185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:49:17.485170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:49:17.485208 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-25 00:49:17.485195556 +0000 UTC m=+649.041298422 I0525 00:49:17.485383 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-25 00:49:17.485367444 +0000 UTC m=+649.041470320 I0525 00:49:17.500457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0525 00:49:17.501026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0525 00:49:17.501152 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-25 00:49:17.501146338 +0000 UTC m=+649.057249204 I0525 00:49:18.105801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-75dzz" condition "Approved" to 2026-05-25 00:49:18.105791882 +0000 UTC m=+649.661894758 I0525 00:49:18.121933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-75dzz" condition "Ready" to 2026-05-25 00:49:18.121923542 +0000 UTC m=+649.678026418 I0525 00:49:18.160706 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-25 00:49:18.160698368 +0000 UTC m=+649.716801234 I0525 00:49:18.184537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"