I0506 09:29:20.829856 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0506 09:29:20.829963 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0506 09:29:20.830034 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0506 09:29:20.833096 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0506 09:29:20.833451 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0506 09:29:20.833603 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0506 09:29:20.833691 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0506 09:29:20.835870 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0506 09:29:20.851775 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0506 09:29:20.852085 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0506 09:29:20.857790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0506 09:29:20.863154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0506 09:29:20.867306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0506 09:29:20.871140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0506 09:29:20.872774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0506 09:29:20.874695 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0506 09:29:20.874712 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0506 09:29:20.874719 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0506 09:29:20.874765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0506 09:29:20.876524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0506 09:29:20.881406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0506 09:29:20.884360 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0506 09:29:20.884401 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0506 09:29:20.884501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0506 09:29:20.888048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0506 09:29:20.890071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0506 09:29:20.891876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0506 09:29:20.893923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0506 09:29:20.895998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0506 09:29:20.897704 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0506 09:29:20.900441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0506 09:29:20.902182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0506 09:29:20.906757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0506 09:29:20.911668 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.912173 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.912511 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.912701 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.927457 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.944703 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.959218 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.974778 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.991888 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:20.995954 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 09:29:37.001214 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-06 09:29:37.001197483 +0000 UTC m=+16.208579566 I0506 09:29:37.721995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:29:37.722069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 09:29:37.722047477 +0000 UTC m=+16.929429500 I0506 09:29:37.722414 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 09:29:37.722395663 +0000 UTC m=+16.929777706 I0506 09:29:37.736144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:29:37.736211 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 09:29:37.736204062 +0000 UTC m=+16.943586085 E0506 09:29:37.743452 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 09:29:37.743519 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-06 09:29:37.743512415 +0000 UTC m=+16.950894428 E0506 09:29:37.743547 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 09:29:37.753859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0506 09:29:37.757158 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0506 09:29:37.757316 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 09:29:37.757360 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 09:29:37.757404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0506 09:29:37.772088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zgmdk" condition "Approved" to 2026-05-06 09:29:37.772079346 +0000 UTC m=+16.979461369 I0506 09:29:37.782444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zgmdk" condition "Ready" to 2026-05-06 09:29:37.782433323 +0000 UTC m=+16.989815346 I0506 09:29:37.804354 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:29:37.80433482 +0000 UTC m=+17.011716843 I0506 09:29:37.814560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:29:37.814860 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:29:37.814853494 +0000 UTC m=+17.022235517 I0506 09:29:37.828111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:29:37.833878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:29:42.758017 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:29:42.757985441 +0000 UTC m=+21.965367514 I0506 09:30:04.130921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:30:04.130999 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 09:30:04.130971467 +0000 UTC m=+43.338353490 I0506 09:30:04.131228 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-06 09:30:04.131214395 +0000 UTC m=+43.338596408 I0506 09:30:04.150251 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-06 09:30:04.150236293 +0000 UTC m=+43.357618326 I0506 09:30:04.158147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:30:04.158229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:30:04.158253 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 09:30:04.158247108 +0000 UTC m=+43.365629131 I0506 09:30:04.680723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bh96q" condition "Approved" to 2026-05-06 09:30:04.680714931 +0000 UTC m=+43.888096944 I0506 09:30:04.711416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bh96q" condition "Ready" to 2026-05-06 09:30:04.711405345 +0000 UTC m=+43.918787358 I0506 09:30:04.741476 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:30:04.741467158 +0000 UTC m=+43.948849171 I0506 09:30:04.772487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:30:04.772794 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:30:04.772778562 +0000 UTC m=+43.980160575 I0506 09:30:04.797728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:30:04.799294 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:30:04.799278208 +0000 UTC m=+44.006660231 I0506 09:34:17.294840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:34:17.294918 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-05-06 09:34:17.294875596 +0000 UTC m=+296.502257649 I0506 09:34:17.295253 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-05-06 09:34:17.29523245 +0000 UTC m=+296.502614503 I0506 09:34:17.311151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:34:17.311242 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-05-06 09:34:17.31123289 +0000 UTC m=+296.518614913 I0506 09:34:17.563959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:34:17.593275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-gwm9c" condition "Approved" to 2026-05-06 09:34:17.593258219 +0000 UTC m=+296.800640272 I0506 09:34:17.619784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-gwm9c" condition "Ready" to 2026-05-06 09:34:17.61976579 +0000 UTC m=+296.827147843 I0506 09:34:17.649897 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:34:17.649882885 +0000 UTC m=+296.857264938 I0506 09:34:17.670954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:35:21.897864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 09:35:21.897840912 +0000 UTC m=+361.105222925 I0506 09:35:21.897900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:35:21.898142 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 09:35:21.898122215 +0000 UTC m=+361.105504268 E0506 09:35:21.909879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 09:35:21.909965 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-06 09:35:21.909953356 +0000 UTC m=+361.117335399 E0506 09:35:21.910025 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 09:35:21.914080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:35:21.914137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:35:21.914154 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 09:35:21.914150098 +0000 UTC m=+361.121532121 E0506 09:35:21.922662 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0506 09:35:21.922720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 09:35:21.922742 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 09:35:21.922771 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0506 09:35:21.944901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:35:21.948092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ngnz9" condition "Approved" to 2026-05-06 09:35:21.948081494 +0000 UTC m=+361.155463527 I0506 09:35:21.960387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ngnz9" condition "Ready" to 2026-05-06 09:35:21.960377326 +0000 UTC m=+361.167759349 I0506 09:35:21.985169 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:35:21.985143367 +0000 UTC m=+361.192525380 I0506 09:35:22.007567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:35:22.008018 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:35:22.008008725 +0000 UTC m=+361.215390748 I0506 09:35:22.024314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:35:22.024726 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:35:22.024717184 +0000 UTC m=+361.232099207 I0506 09:35:26.923186 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:35:26.923170705 +0000 UTC m=+366.130552728 I0506 09:36:06.827613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:06.827663 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 09:36:06.82763471 +0000 UTC m=+406.035016723 I0506 09:36:06.828057 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 09:36:06.828053245 +0000 UTC m=+406.035435258 I0506 09:36:06.835043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:06.835171 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 09:36:06.835059733 +0000 UTC m=+406.042441746 I0506 09:36:06.835368 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 09:36:06.835363784 +0000 UTC m=+406.042745797 I0506 09:36:06.835790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:06.835806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-06 09:36:06.835803109 +0000 UTC m=+406.043185112 I0506 09:36:06.835991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 09:36:06.835987306 +0000 UTC m=+406.043369319 I0506 09:36:06.886452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:06.886606 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 09:36:06.886597745 +0000 UTC m=+406.093979779 I0506 09:36:06.888668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:06.888849 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 09:36:06.888842515 +0000 UTC m=+406.096224528 I0506 09:36:06.896842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:06.896905 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 09:36:06.89689946 +0000 UTC m=+406.104281473 I0506 09:36:07.011488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.011983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.035299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rh46s" condition "Approved" to 2026-05-06 09:36:07.035284748 +0000 UTC m=+406.242666771 I0506 09:36:07.045062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q5lrs" condition "Approved" to 2026-05-06 09:36:07.045049831 +0000 UTC m=+406.252431864 I0506 09:36:07.055106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rh46s" condition "Ready" to 2026-05-06 09:36:07.055093215 +0000 UTC m=+406.262475238 I0506 09:36:07.063884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q5lrs" condition "Ready" to 2026-05-06 09:36:07.063875284 +0000 UTC m=+406.271257297 I0506 09:36:07.089636 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:07.089628561 +0000 UTC m=+406.297010574 I0506 09:36:07.093208 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:07.093204597 +0000 UTC m=+406.300586610 I0506 09:36:07.115824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.116055 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:07.116050832 +0000 UTC m=+406.323432845 I0506 09:36:07.116217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.116395 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:07.116392674 +0000 UTC m=+406.323774677 I0506 09:36:07.311068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.359163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.611969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:07.769457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6cdt6" condition "Approved" to 2026-05-06 09:36:07.769439992 +0000 UTC m=+406.976822045 I0506 09:36:07.869762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6cdt6" condition "Ready" to 2026-05-06 09:36:07.869746845 +0000 UTC m=+407.077128898 I0506 09:36:08.314350 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:08.314333256 +0000 UTC m=+407.521715299 I0506 09:36:08.412273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:08.412859 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:08.412848162 +0000 UTC m=+407.620230215 I0506 09:36:08.660969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:08.713979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:16.432719 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" condition "Ready" to 2026-05-06 09:36:16.432696622 +0000 UTC m=+415.640078675 I0506 09:36:16.432760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:16.432795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" condition "Issuing" to 2026-05-06 09:36:16.432786975 +0000 UTC m=+415.640168998 I0506 09:36:16.451249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:16.451333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:16.451352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" condition "Issuing" to 2026-05-06 09:36:16.451345785 +0000 UTC m=+415.658727808 I0506 09:36:16.572977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zfsgg-w85vm" condition "Approved" to 2026-05-06 09:36:16.572961215 +0000 UTC m=+415.780343258 I0506 09:36:16.598221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zfsgg-w85vm" condition "Ready" to 2026-05-06 09:36:16.598210202 +0000 UTC m=+415.805592225 I0506 09:36:16.643063 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:16.642972303 +0000 UTC m=+415.850354356 I0506 09:36:16.659917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:16.660271 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:16.66026474 +0000 UTC m=+415.867646763 I0506 09:36:16.682810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zfsgg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:28.472848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:36:28.473115 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-06 09:36:28.473111359 +0000 UTC m=+427.680493382 I0506 09:36:28.473016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 09:36:28.473003396 +0000 UTC m=+427.680385409 I0506 09:36:28.493826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:28.494047 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 09:36:28.494036268 +0000 UTC m=+427.701418291 I0506 09:36:28.735028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:36:28.775008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mk95f" condition "Approved" to 2026-05-06 09:36:28.774995765 +0000 UTC m=+427.982377778 I0506 09:36:28.794758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mk95f" condition "Ready" to 2026-05-06 09:36:28.794742585 +0000 UTC m=+428.002124598 I0506 09:36:28.831413 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:36:28.831396423 +0000 UTC m=+428.038778456 I0506 09:36:28.857121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:39:39.459574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:39:39.459626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-06 09:39:39.459600765 +0000 UTC m=+618.666982788 I0506 09:39:39.460031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 09:39:39.460016133 +0000 UTC m=+618.667398156 I0506 09:39:39.480467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:39:39.480528 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 09:39:39.480521898 +0000 UTC m=+618.687903921 I0506 09:39:39.616991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:39:39.660697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qh2kd" condition "Approved" to 2026-05-06 09:39:39.660688699 +0000 UTC m=+618.868070712 I0506 09:39:39.678833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qh2kd" condition "Ready" to 2026-05-06 09:39:39.678822276 +0000 UTC m=+618.886204299 I0506 09:39:39.714648 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:39:39.714630071 +0000 UTC m=+618.922012114 I0506 09:39:39.741291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:39:39.741676 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:39:39.741669889 +0000 UTC m=+618.949051912 I0506 09:39:39.756526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:39:39.756737 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:39:39.756731014 +0000 UTC m=+618.964113027 I0506 09:40:19.695935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 09:40:19.696003 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-06 09:40:19.695995277 +0000 UTC m=+658.903377300 I0506 09:40:19.696357 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 09:40:19.696347234 +0000 UTC m=+658.903729247 I0506 09:40:19.718976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:40:19.719235 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 09:40:19.719225956 +0000 UTC m=+658.926607989 I0506 09:40:19.858552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:40:19.888423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p46fq" condition "Approved" to 2026-05-06 09:40:19.888414564 +0000 UTC m=+659.095796577 I0506 09:40:19.907846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p46fq" condition "Ready" to 2026-05-06 09:40:19.90783711 +0000 UTC m=+659.115219133 I0506 09:40:19.934834 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:40:19.934825011 +0000 UTC m=+659.142207034 I0506 09:40:19.954622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 09:40:19.954971 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 09:40:19.9549654 +0000 UTC m=+659.162347423 I0506 09:40:19.979054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"