I0519 02:55:03.323824 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0519 02:55:03.324127 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0519 02:55:03.324210 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0519 02:55:03.329289 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0519 02:55:03.329945 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0519 02:55:03.329990 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0519 02:55:03.330050 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0519 02:55:03.333840 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0519 02:55:03.347697 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0519 02:55:03.353792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0519 02:55:03.356612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0519 02:55:03.359165 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0519 02:55:03.359249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0519 02:55:03.361955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0519 02:55:03.363875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0519 02:55:03.365801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0519 02:55:03.365977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0519 02:55:03.367753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0519 02:55:03.373350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0519 02:55:03.377281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0519 02:55:03.379312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0519 02:55:03.379331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0519 02:55:03.379404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0519 02:55:03.381217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0519 02:55:03.383118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0519 02:55:03.385204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0519 02:55:03.386700 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0519 02:55:03.386716 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0519 02:55:03.386895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0519 02:55:03.388588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0519 02:55:03.395430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0519 02:55:03.398665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0519 02:55:03.400413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0519 02:55:03.404159 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.404899 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.405111 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.406037 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.406447 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.407388 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.408420 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.408601 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.409140 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:03.492652 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 02:55:19.490733 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 02:55:19.490717394 +0000 UTC m=+16.196430932 I0519 02:55:20.150767 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 02:55:20.150755826 +0000 UTC m=+16.856469354 I0519 02:55:20.151327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 02:55:20.151396 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 02:55:20.15138047 +0000 UTC m=+16.857094038 E0519 02:55:20.164957 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 02:55:20.165038 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 02:55:20.165028912 +0000 UTC m=+16.870742450 E0519 02:55:20.165067 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 02:55:20.167182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:20.167424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 02:55:20.167542 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 02:55:20.167465694 +0000 UTC m=+16.873179232 E0519 02:55:20.172935 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0519 02:55:20.173193 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 02:55:20.173226 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 02:55:20.173307 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 02:55:20.204188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-85tnr" condition "Approved" to 2026-05-19 02:55:20.204171451 +0000 UTC m=+16.909885019 I0519 02:55:20.218904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-85tnr" condition "Ready" to 2026-05-19 02:55:20.218891527 +0000 UTC m=+16.924605065 I0519 02:55:20.237800 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 02:55:20.237786381 +0000 UTC m=+16.943499919 I0519 02:55:20.254673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:25.174068 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 02:55:25.174051439 +0000 UTC m=+21.879764997 I0519 02:55:45.091457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 02:55:45.09143064 +0000 UTC m=+41.797144178 I0519 02:55:45.091414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 02:55:45.095016 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 02:55:45.095005642 +0000 UTC m=+41.800719220 I0519 02:55:45.109236 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 02:55:45.109225355 +0000 UTC m=+41.814938893 I0519 02:55:45.123723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:45.123781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 02:55:45.123802 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 02:55:45.123796083 +0000 UTC m=+41.829509621 I0519 02:55:45.635446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:45.648086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dfpb7" condition "Approved" to 2026-05-19 02:55:45.648071945 +0000 UTC m=+42.353785513 I0519 02:55:45.679205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dfpb7" condition "Ready" to 2026-05-19 02:55:45.679194707 +0000 UTC m=+42.384908245 I0519 02:55:45.707355 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 02:55:45.707345898 +0000 UTC m=+42.413059426 I0519 02:55:45.730883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:45.732805 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 02:55:45.732799323 +0000 UTC m=+42.438512851 I0519 02:55:45.751199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 02:55:45.751456 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 02:55:45.751449102 +0000 UTC m=+42.457162640 I0519 02:55:45.751783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:00:32.655625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready" to 2026-05-19 03:00:32.655593764 +0000 UTC m=+329.361307302 I0519 03:00:32.656123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-171.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:00:32.656626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Issuing" to 2026-05-19 03:00:32.656618214 +0000 UTC m=+329.362331752 I0519 03:00:32.676040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:00:32.676184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-171.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:00:32.676279 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Issuing" to 2026-05-19 03:00:32.676271491 +0000 UTC m=+329.381985039 I0519 03:00:32.976027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-pdn45" condition "Approved" to 2026-05-19 03:00:32.976016244 +0000 UTC m=+329.681729782 I0519 03:00:33.012631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-pdn45" condition "Ready" to 2026-05-19 03:00:33.012585804 +0000 UTC m=+329.718299342 I0519 03:00:33.041723 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:00:33.041706875 +0000 UTC m=+329.747420803 I0519 03:00:33.060809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:00:33.061239 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:00:33.061229298 +0000 UTC m=+329.766942836 I0519 03:00:33.082667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:01:35.465149 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 03:01:35.465134139 +0000 UTC m=+392.170847687 I0519 03:01:35.465421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:01:35.465495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 03:01:35.465479056 +0000 UTC m=+392.171192614 E0519 03:01:35.476027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 03:01:35.476073 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 03:01:35.476065686 +0000 UTC m=+392.181779224 E0519 03:01:35.476120 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 03:01:35.478213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:01:35.478562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:01:35.478710 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 03:01:35.478703578 +0000 UTC m=+392.184417126 E0519 03:01:35.485556 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0519 03:01:35.486226 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 03:01:35.486272 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 03:01:35.486362 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0519 03:01:35.510740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m2nqd" condition "Approved" to 2026-05-19 03:01:35.510728494 +0000 UTC m=+392.216442032 I0519 03:01:35.525931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m2nqd" condition "Ready" to 2026-05-19 03:01:35.525919198 +0000 UTC m=+392.231632736 I0519 03:01:35.546637 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:01:35.546625962 +0000 UTC m=+392.252339490 I0519 03:01:35.564885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:01:40.486362 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:01:40.486347809 +0000 UTC m=+397.192061367 I0519 03:02:20.823145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:20.823216 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 03:02:20.823193287 +0000 UTC m=+437.528906825 I0519 03:02:20.829289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 03:02:20.829275584 +0000 UTC m=+437.534989112 I0519 03:02:20.829647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:20.829698 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 03:02:20.829693991 +0000 UTC m=+437.535407519 I0519 03:02:20.831508 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 03:02:20.818751553 +0000 UTC m=+437.524465091 I0519 03:02:20.858749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:20.858807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 03:02:20.858802229 +0000 UTC m=+437.564515757 I0519 03:02:20.863568 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 03:02:20.863551128 +0000 UTC m=+437.569264646 I0519 03:02:20.886462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:20.886564 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 03:02:20.88655121 +0000 UTC m=+437.592264748 I0519 03:02:20.888869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:20.888919 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 03:02:20.888913994 +0000 UTC m=+437.594627522 I0519 03:02:20.889858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:20.889908 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 03:02:20.889902959 +0000 UTC m=+437.595616487 I0519 03:02:21.089891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.129803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qbklc" condition "Approved" to 2026-05-19 03:02:21.129792002 +0000 UTC m=+437.835505530 I0519 03:02:21.177794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qbklc" condition "Ready" to 2026-05-19 03:02:21.177783272 +0000 UTC m=+437.883496800 I0519 03:02:21.196331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.219093 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:21.219082907 +0000 UTC m=+437.924796425 I0519 03:02:21.220138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.275182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.280109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f79mz" condition "Approved" to 2026-05-19 03:02:21.280094044 +0000 UTC m=+437.985807572 I0519 03:02:21.302014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f79mz" condition "Ready" to 2026-05-19 03:02:21.301993199 +0000 UTC m=+438.007706727 I0519 03:02:21.350357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.362800 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:21.362786483 +0000 UTC m=+438.068500021 I0519 03:02:21.444446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:21.951766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-92fmn" condition "Approved" to 2026-05-19 03:02:21.951748106 +0000 UTC m=+438.657461674 I0519 03:02:22.125948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-92fmn" condition "Ready" to 2026-05-19 03:02:22.125934538 +0000 UTC m=+438.831648066 I0519 03:02:22.541900 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-92fmn" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-cdz8w" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0519 03:02:22.704480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z6c7h" condition "Approved" to 2026-05-19 03:02:22.704466792 +0000 UTC m=+439.410180330 I0519 03:02:22.876995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z6c7h" condition "Ready" to 2026-05-19 03:02:22.876985909 +0000 UTC m=+439.582699437 I0519 03:02:23.254588 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:23.254562021 +0000 UTC m=+439.960275579 I0519 03:02:23.350001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:23.350557 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:23.350545665 +0000 UTC m=+440.056259203 I0519 03:02:23.547513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:29.293772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:29.293844 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" condition "Issuing" to 2026-05-19 03:02:29.293834894 +0000 UTC m=+445.999548432 I0519 03:02:29.293864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" condition "Ready" to 2026-05-19 03:02:29.293842164 +0000 UTC m=+445.999555692 I0519 03:02:29.306739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlr99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:29.306901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:29.306986 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" condition "Issuing" to 2026-05-19 03:02:29.306918768 +0000 UTC m=+446.012632306 I0519 03:02:29.544614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlr99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:29.554047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlr99-c8m99" condition "Approved" to 2026-05-19 03:02:29.554033654 +0000 UTC m=+446.259747182 I0519 03:02:29.586252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlr99-c8m99" condition "Ready" to 2026-05-19 03:02:29.58623741 +0000 UTC m=+446.291950938 I0519 03:02:29.622630 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:29.622614244 +0000 UTC m=+446.328327782 I0519 03:02:29.644610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlr99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:29.908240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlr99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlr99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:42.662625 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 03:02:42.662594372 +0000 UTC m=+459.368307940 I0519 03:02:42.663280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:02:42.663307 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 03:02:42.663301132 +0000 UTC m=+459.369014690 I0519 03:02:42.688622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:42.688667 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 03:02:42.688661772 +0000 UTC m=+459.394375310 I0519 03:02:43.301575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:43.338261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9wmjr" condition "Approved" to 2026-05-19 03:02:43.338238329 +0000 UTC m=+460.043951867 I0519 03:02:43.365131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9wmjr" condition "Ready" to 2026-05-19 03:02:43.365121279 +0000 UTC m=+460.070834807 I0519 03:02:43.408990 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:43.408972613 +0000 UTC m=+460.114686151 I0519 03:02:43.439220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:02:43.439683 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:02:43.439676695 +0000 UTC m=+460.145390233 I0519 03:02:43.473757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:05:48.939084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:05:48.939307 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 03:05:48.939259572 +0000 UTC m=+645.644973140 I0519 03:05:48.940545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 03:05:48.939160171 +0000 UTC m=+645.644873739 I0519 03:05:48.959942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:05:48.960041 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 03:05:48.960031695 +0000 UTC m=+645.665745233 I0519 03:05:49.242536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:05:49.277717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dg5rk" condition "Approved" to 2026-05-19 03:05:49.277698071 +0000 UTC m=+645.983411599 I0519 03:05:49.306675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dg5rk" condition "Ready" to 2026-05-19 03:05:49.306665267 +0000 UTC m=+646.012378795 I0519 03:05:49.337434 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:05:49.337419172 +0000 UTC m=+646.043132710 I0519 03:05:49.363800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:05:49.364357 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:05:49.364348984 +0000 UTC m=+646.070062522 I0519 03:05:49.379599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:05:49.380011 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:05:49.379996539 +0000 UTC m=+646.085710067 I0519 03:06:28.159485 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-19 03:06:28.159448511 +0000 UTC m=+684.865162049 I0519 03:06:28.159733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:06:28.159754 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-19 03:06:28.159749915 +0000 UTC m=+684.865463453 I0519 03:06:28.203772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:06:28.203882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 03:06:28.203903 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-19 03:06:28.203897732 +0000 UTC m=+684.909611260 I0519 03:06:28.554605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8s287" condition "Approved" to 2026-05-19 03:06:28.554579416 +0000 UTC m=+685.260292984 I0519 03:06:28.585859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8s287" condition "Ready" to 2026-05-19 03:06:28.585849842 +0000 UTC m=+685.291563370 I0519 03:06:28.616076 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:06:28.616061544 +0000 UTC m=+685.321775072 I0519 03:06:28.636176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:06:28.638038 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 03:06:28.638028396 +0000 UTC m=+685.343741924 I0519 03:06:28.649968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 03:06:28.663277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"