I0509 01:31:35.850045 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0509 01:31:35.850653 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0509 01:31:35.850885 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0509 01:31:35.858866 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0509 01:31:35.859740 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0509 01:31:35.859856 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0509 01:31:35.859896 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0509 01:31:35.862490 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0509 01:31:35.876621 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0509 01:31:35.882333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0509 01:31:35.888933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0509 01:31:35.893220 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0509 01:31:35.893299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0509 01:31:35.895912 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0509 01:31:35.895935 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0509 01:31:35.896029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0509 01:31:35.898383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0509 01:31:35.900662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0509 01:31:35.902568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0509 01:31:35.904393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0509 01:31:35.907038 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0509 01:31:35.912251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0509 01:31:35.915867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0509 01:31:35.915890 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0509 01:31:35.915900 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0509 01:31:35.916023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0509 01:31:35.917791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0509 01:31:35.919721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0509 01:31:35.921560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0509 01:31:35.923600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0509 01:31:35.925391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0509 01:31:35.927110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0509 01:31:35.933562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0509 01:31:35.938701 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:35.939034 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:35.939423 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:35.939962 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:35.988583 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:36.002843 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:36.016414 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:36.019469 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:36.040430 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:36.081388 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0509 01:31:45.863296 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-09 01:31:45.86325795 +0000 UTC m=+10.046263138 I0509 01:31:46.548113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:31:46.548064 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-09 01:31:46.548046544 +0000 UTC m=+10.731051732 I0509 01:31:46.548767 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 01:31:46.548753948 +0000 UTC m=+10.731759136 I0509 01:31:46.564007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:31:46.564074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:31:46.564100 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 01:31:46.564094555 +0000 UTC m=+10.747099713 E0509 01:31:46.564190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 01:31:46.564271 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-09 01:31:46.56426122 +0000 UTC m=+10.747266408 E0509 01:31:46.564304 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 01:31:46.578529 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0509 01:31:46.578637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 01:31:46.578752 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 01:31:46.578792 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0509 01:31:46.597594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:31:46.602510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tgpch" condition "Approved" to 2026-05-09 01:31:46.602500402 +0000 UTC m=+10.785505560 I0509 01:31:46.616023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tgpch" condition "Ready" to 2026-05-09 01:31:46.616007725 +0000 UTC m=+10.799012883 I0509 01:31:46.638247 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:31:46.638200896 +0000 UTC m=+10.821206084 I0509 01:31:46.653279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:31:46.653624 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:31:46.653617145 +0000 UTC m=+10.836622303 I0509 01:31:46.667294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:31:46.667562 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:31:46.667549853 +0000 UTC m=+10.850555001 I0509 01:31:51.579763 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:31:51.579744812 +0000 UTC m=+15.762750000 I0509 01:32:10.928917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:32:10.929063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 01:32:10.92905316 +0000 UTC m=+35.112058328 I0509 01:32:10.928964 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-09 01:32:10.928931546 +0000 UTC m=+35.111936734 I0509 01:32:10.941260 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-09 01:32:10.941248546 +0000 UTC m=+35.124253704 I0509 01:32:10.965030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:32:10.965223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:32:10.965284 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 01:32:10.965277857 +0000 UTC m=+35.148283005 I0509 01:32:11.323955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:32:11.330139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zkt2b" condition "Approved" to 2026-05-09 01:32:11.330124732 +0000 UTC m=+35.513129900 I0509 01:32:11.364508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zkt2b" condition "Ready" to 2026-05-09 01:32:11.364496641 +0000 UTC m=+35.547501799 I0509 01:32:11.392057 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:32:11.39203693 +0000 UTC m=+35.575042108 I0509 01:32:11.412854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:32:11.413208 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:32:11.413200999 +0000 UTC m=+35.596206157 I0509 01:32:11.432016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:36:16.011646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:36:16.011719 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-05-09 01:36:16.011693293 +0000 UTC m=+280.194698451 I0509 01:36:16.012037 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-05-09 01:36:16.012031829 +0000 UTC m=+280.195036987 I0509 01:36:16.028796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:36:16.028846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:36:16.028858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-05-09 01:36:16.028853435 +0000 UTC m=+280.211858593 I0509 01:36:16.204128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:36:16.207295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-954z2" condition "Approved" to 2026-05-09 01:36:16.207284105 +0000 UTC m=+280.390289293 I0509 01:36:16.229960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-954z2" condition "Ready" to 2026-05-09 01:36:16.229944838 +0000 UTC m=+280.412949976 I0509 01:36:16.249636 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:36:16.249624205 +0000 UTC m=+280.432629363 I0509 01:36:16.266439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:36:16.267265 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:36:16.267258149 +0000 UTC m=+280.450263307 I0509 01:36:16.281371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.423305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:37:19.423377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-09 01:37:19.42334336 +0000 UTC m=+343.606348538 I0509 01:37:19.423754 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-09 01:37:19.423737953 +0000 UTC m=+343.606743141 E0509 01:37:19.434131 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 01:37:19.434160 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-09 01:37:19.434153372 +0000 UTC m=+343.617158530 E0509 01:37:19.434308 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0509 01:37:19.434904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.434946 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-09 01:37:19.434941598 +0000 UTC m=+343.617946756 E0509 01:37:19.445602 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0509 01:37:19.445652 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 01:37:19.445673 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0509 01:37:19.445688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0509 01:37:19.449115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.464769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-psqvf" condition "Approved" to 2026-05-09 01:37:19.464748378 +0000 UTC m=+343.647753566 I0509 01:37:19.477856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-psqvf" condition "Ready" to 2026-05-09 01:37:19.477845827 +0000 UTC m=+343.660850985 I0509 01:37:19.495579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:37:19.495571222 +0000 UTC m=+343.678576380 I0509 01:37:19.511021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.511658 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:37:19.51164218 +0000 UTC m=+343.694647368 I0509 01:37:19.528506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.528523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:19.528699 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:37:19.528691483 +0000 UTC m=+343.711696631 I0509 01:37:19.530361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:37:24.446343 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:37:24.446312494 +0000 UTC m=+348.629317672 I0509 01:38:03.711846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:03.716715 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-09 01:38:03.716706456 +0000 UTC m=+387.899711594 I0509 01:38:03.714886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-09 01:38:03.714842474 +0000 UTC m=+387.897847622 I0509 01:38:03.715010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:03.720650 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-09 01:38:03.720638296 +0000 UTC m=+387.903643444 I0509 01:38:03.715038 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-09 01:38:03.715034809 +0000 UTC m=+387.898039957 I0509 01:38:03.715212 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-09 01:38:03.715208715 +0000 UTC m=+387.898213863 I0509 01:38:03.715238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:03.725848 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 01:38:03.725837382 +0000 UTC m=+387.908842550 I0509 01:38:03.772053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:03.772076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:03.772774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:03.774873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:03.774915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:03.774948 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-09 01:38:03.77494125 +0000 UTC m=+387.957946408 I0509 01:38:03.775000 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 01:38:03.7749567 +0000 UTC m=+387.957961848 I0509 01:38:03.774886 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-09 01:38:03.774871388 +0000 UTC m=+387.957876536 I0509 01:38:03.940221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:03.993870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-spmp7" condition "Approved" to 2026-05-09 01:38:03.993857699 +0000 UTC m=+388.176862857 I0509 01:38:04.016712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-25rld" condition "Approved" to 2026-05-09 01:38:04.016700938 +0000 UTC m=+388.199706106 I0509 01:38:04.025056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-spmp7" condition "Ready" to 2026-05-09 01:38:04.025046551 +0000 UTC m=+388.208051729 I0509 01:38:04.062138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-25rld" condition "Ready" to 2026-05-09 01:38:04.062123187 +0000 UTC m=+388.245128335 I0509 01:38:04.097839 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:04.097828534 +0000 UTC m=+388.280833682 I0509 01:38:04.123689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:04.123989 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:04.123983295 +0000 UTC m=+388.306988443 I0509 01:38:04.127639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7wn28" condition "Approved" to 2026-05-09 01:38:04.127634057 +0000 UTC m=+388.310639205 I0509 01:38:04.131514 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:04.131503305 +0000 UTC m=+388.314508453 I0509 01:38:04.273955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7wn28" condition "Ready" to 2026-05-09 01:38:04.273944815 +0000 UTC m=+388.456949963 I0509 01:38:04.500627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:04.619559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:04.907983 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:04.907946648 +0000 UTC m=+389.090951836 I0509 01:38:05.062550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:05.063146 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:05.063135388 +0000 UTC m=+389.246140566 I0509 01:38:05.399243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:05.452585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:11.744079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:11.744538 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" condition "Issuing" to 2026-05-09 01:38:11.744524977 +0000 UTC m=+395.927530145 I0509 01:38:11.745209 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" condition "Ready" to 2026-05-09 01:38:11.745203555 +0000 UTC m=+395.928208713 I0509 01:38:11.759643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:11.760021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:11.760102 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" condition "Issuing" to 2026-05-09 01:38:11.76009671 +0000 UTC m=+395.943101868 I0509 01:38:11.967887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:11.980157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m2g5-pjkg4" condition "Approved" to 2026-05-09 01:38:11.980143053 +0000 UTC m=+396.163148211 I0509 01:38:11.997303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m2g5-pjkg4" condition "Ready" to 2026-05-09 01:38:11.99729041 +0000 UTC m=+396.180295558 I0509 01:38:12.032061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:12.032046663 +0000 UTC m=+396.215051841 I0509 01:38:12.057481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m2g5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:25.553735 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-09 01:38:25.553720694 +0000 UTC m=+409.736725842 I0509 01:38:25.554325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:38:25.554344 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-09 01:38:25.55433885 +0000 UTC m=+409.737343998 I0509 01:38:25.570348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:25.570662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-09 01:38:25.570652383 +0000 UTC m=+409.753657541 I0509 01:38:25.789935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:38:25.822377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jqqcc" condition "Approved" to 2026-05-09 01:38:25.82236153 +0000 UTC m=+410.005366668 I0509 01:38:25.842372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jqqcc" condition "Ready" to 2026-05-09 01:38:25.842360599 +0000 UTC m=+410.025365757 I0509 01:38:25.866006 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:38:25.865993352 +0000 UTC m=+410.048998500 I0509 01:38:25.889958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:41:32.221561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:41:32.221650 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-09 01:41:32.221633963 +0000 UTC m=+596.404639141 I0509 01:41:32.221864 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-09 01:41:32.221848927 +0000 UTC m=+596.404854115 I0509 01:41:32.236853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:41:32.236911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:41:32.236930 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-09 01:41:32.236923547 +0000 UTC m=+596.419928705 I0509 01:41:32.643369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:41:32.659706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gzdrm" condition "Approved" to 2026-05-09 01:41:32.659696441 +0000 UTC m=+596.842701609 I0509 01:41:32.680387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gzdrm" condition "Ready" to 2026-05-09 01:41:32.68037723 +0000 UTC m=+596.863382378 I0509 01:41:32.701745 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:41:32.701733569 +0000 UTC m=+596.884738747 I0509 01:41:32.718409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:42:10.499158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:42:10.499249 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-09 01:42:10.499241609 +0000 UTC m=+634.682246767 I0509 01:42:10.499157 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-09 01:42:10.499131097 +0000 UTC m=+634.682136255 I0509 01:42:10.515742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:42:10.515796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0509 01:42:10.515810 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-09 01:42:10.515804494 +0000 UTC m=+634.698809642 I0509 01:42:10.701516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5mq2b" condition "Approved" to 2026-05-09 01:42:10.701503963 +0000 UTC m=+634.884509121 I0509 01:42:10.721802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5mq2b" condition "Ready" to 2026-05-09 01:42:10.72178908 +0000 UTC m=+634.904794238 I0509 01:42:10.747596 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:42:10.747581249 +0000 UTC m=+634.930586407 I0509 01:42:10.761978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0509 01:42:10.762300 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 01:42:10.762292415 +0000 UTC m=+634.945297573 I0509 01:42:10.788835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"