I0514 05:21:47.562974 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0514 05:21:47.563101 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0514 05:21:47.563189 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0514 05:21:47.568456 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0514 05:21:47.568996 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0514 05:21:47.569103 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0514 05:21:47.569123 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0514 05:21:47.574127 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0514 05:21:47.589410 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0514 05:21:47.596268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0514 05:21:47.603589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0514 05:21:47.605294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0514 05:21:47.608491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0514 05:21:47.615897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0514 05:21:47.618518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0514 05:21:47.621097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0514 05:21:47.621137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0514 05:21:47.621149 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0514 05:21:47.621172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0514 05:21:47.623947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0514 05:21:47.626528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0514 05:21:47.628617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0514 05:21:47.636179 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0514 05:21:47.636261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0514 05:21:47.639742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0514 05:21:47.642834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0514 05:21:47.646060 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0514 05:21:47.646127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0514 05:21:47.649264 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0514 05:21:47.649359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0514 05:21:47.652500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0514 05:21:47.655073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0514 05:21:47.657964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0514 05:21:47.664218 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.664739 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.667904 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.667897 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.683628 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.703026 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.718693 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.730447 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.750090 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:47.768207 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0514 05:21:59.568764 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-14 05:21:59.568737383 +0000 UTC m=+12.044561024 I0514 05:22:00.387003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:22:00.387037 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-14 05:22:00.3870316 +0000 UTC m=+12.862855221 I0514 05:22:00.387146 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 05:22:00.387123352 +0000 UTC m=+12.862947023 E0514 05:22:00.402131 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 05:22:00.402208 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-14 05:22:00.40219915 +0000 UTC m=+12.878022781 E0514 05:22:00.402232 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 05:22:00.404691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:00.404753 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-14 05:22:00.404746542 +0000 UTC m=+12.880570163 E0514 05:22:00.416032 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0514 05:22:00.416245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 05:22:00.416412 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 05:22:00.416586 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0514 05:22:00.422501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:00.444143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8lvhz" condition "Approved" to 2026-05-14 05:22:00.444125705 +0000 UTC m=+12.919949366 I0514 05:22:00.458720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8lvhz" condition "Ready" to 2026-05-14 05:22:00.458703282 +0000 UTC m=+12.934526913 I0514 05:22:00.497762 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:22:00.497745308 +0000 UTC m=+12.973568959 I0514 05:22:00.516952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:00.517346 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:22:00.517339486 +0000 UTC m=+12.993163107 I0514 05:22:00.542440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:05.417048 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:22:05.41702789 +0000 UTC m=+17.892851541 I0514 05:22:31.410370 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-14 05:22:31.410348153 +0000 UTC m=+43.886171814 I0514 05:22:31.411052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:22:31.411147 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 05:22:31.411142345 +0000 UTC m=+43.886965976 I0514 05:22:31.422784 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-14 05:22:31.42276331 +0000 UTC m=+43.898586941 I0514 05:22:31.449819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:31.450000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:22:31.450055 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-14 05:22:31.450049495 +0000 UTC m=+43.925873116 I0514 05:22:31.746903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:31.764568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s8nlv" condition "Approved" to 2026-05-14 05:22:31.764549741 +0000 UTC m=+44.240373362 I0514 05:22:31.803624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s8nlv" condition "Ready" to 2026-05-14 05:22:31.803606433 +0000 UTC m=+44.279430074 I0514 05:22:31.842882 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:22:31.842860678 +0000 UTC m=+44.318684309 I0514 05:22:31.871765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:22:31.872082 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:22:31.872074363 +0000 UTC m=+44.347897984 I0514 05:22:31.901165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:27:36.179620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:27:36.179679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Issuing" to 2026-05-14 05:27:36.179665871 +0000 UTC m=+348.655489522 I0514 05:27:36.178857 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready" to 2026-05-14 05:27:36.178831195 +0000 UTC m=+348.654654826 I0514 05:27:36.198103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:27:36.198190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:27:36.198210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Issuing" to 2026-05-14 05:27:36.198203873 +0000 UTC m=+348.674027504 I0514 05:27:36.322146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-2g8ts" condition "Approved" to 2026-05-14 05:27:36.32212908 +0000 UTC m=+348.797952731 I0514 05:27:36.355189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-2g8ts" condition "Ready" to 2026-05-14 05:27:36.355174365 +0000 UTC m=+348.830997996 I0514 05:27:36.386569 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:27:36.386547716 +0000 UTC m=+348.862371357 I0514 05:27:36.407428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:27:36.407775 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:27:36.40776637 +0000 UTC m=+348.883590001 I0514 05:27:36.425123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:27:36.425666 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:27:36.425654989 +0000 UTC m=+348.901478610 I0514 05:28:42.755928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-14 05:28:42.755907541 +0000 UTC m=+415.231731202 I0514 05:28:42.756556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:28:42.756620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 05:28:42.756612762 +0000 UTC m=+415.232436423 I0514 05:28:42.771317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:28:42.771380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:28:42.771396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-14 05:28:42.771389443 +0000 UTC m=+415.247213064 E0514 05:28:42.772574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0514 05:28:42.772603 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-14 05:28:42.772596593 +0000 UTC m=+415.248420214 E0514 05:28:42.772645 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 05:28:42.795548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0514 05:28:42.795730 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 05:28:42.795802 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0514 05:28:42.795866 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0514 05:28:42.818436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scqxj" condition "Approved" to 2026-05-14 05:28:42.818426943 +0000 UTC m=+415.294250564 I0514 05:28:42.832288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scqxj" condition "Ready" to 2026-05-14 05:28:42.832277869 +0000 UTC m=+415.308101490 I0514 05:28:42.859199 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:28:42.85918509 +0000 UTC m=+415.335008731 I0514 05:28:42.876433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:28:42.917585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:28:47.797421 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:28:47.796826543 +0000 UTC m=+420.272650154 I0514 05:29:29.636640 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 05:29:29.636627776 +0000 UTC m=+462.112451397 I0514 05:29:29.636925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:29.636978 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-14 05:29:29.636968551 +0000 UTC m=+462.112792162 I0514 05:29:29.650810 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-14 05:29:29.650800958 +0000 UTC m=+462.126624579 I0514 05:29:29.650885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:29.650915 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 05:29:29.65090756 +0000 UTC m=+462.126731181 I0514 05:29:29.651603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:29.651624 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-14 05:29:29.65162169 +0000 UTC m=+462.127445311 I0514 05:29:29.651642 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 05:29:29.65162094 +0000 UTC m=+462.127444561 I0514 05:29:29.709342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:29.709437 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-14 05:29:29.709429293 +0000 UTC m=+462.185252924 I0514 05:29:29.711739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:29.711913 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-14 05:29:29.71190114 +0000 UTC m=+462.187724791 I0514 05:29:29.718988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:29.719096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:29.719128 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-14 05:29:29.719121397 +0000 UTC m=+462.194945018 I0514 05:29:29.891088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:29.911177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:29.928069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qslhm" condition "Approved" to 2026-05-14 05:29:29.928058105 +0000 UTC m=+462.403881736 I0514 05:29:29.955501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qslhm" condition "Ready" to 2026-05-14 05:29:29.955490285 +0000 UTC m=+462.431313916 I0514 05:29:29.959280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w9frb" condition "Approved" to 2026-05-14 05:29:29.959264571 +0000 UTC m=+462.435088202 I0514 05:29:29.982464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w9frb" condition "Ready" to 2026-05-14 05:29:29.982451577 +0000 UTC m=+462.458275198 I0514 05:29:29.999198 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:29.999183916 +0000 UTC m=+462.475007547 I0514 05:29:30.064125 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:30.064116184 +0000 UTC m=+462.539939805 I0514 05:29:30.064855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:30.065055 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:30.065052428 +0000 UTC m=+462.540876049 I0514 05:29:30.122736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:30.122961 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:30.12295507 +0000 UTC m=+462.598778691 I0514 05:29:30.125596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:30.125806 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:30.125802262 +0000 UTC m=+462.601625893 I0514 05:29:30.275830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:30.276427 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:30.276415166 +0000 UTC m=+462.752238817 I0514 05:29:30.329460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:30.580062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lnb8v" condition "Approved" to 2026-05-14 05:29:30.580047551 +0000 UTC m=+463.055871182 I0514 05:29:30.686038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lnb8v" condition "Ready" to 2026-05-14 05:29:30.686026318 +0000 UTC m=+463.161849949 I0514 05:29:31.135883 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:31.135868757 +0000 UTC m=+463.611692378 I0514 05:29:31.242950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:31.243789 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:31.243780232 +0000 UTC m=+463.719603853 I0514 05:29:31.425498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:34.865361 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" condition "Ready" to 2026-05-14 05:29:34.865319448 +0000 UTC m=+467.341143089 I0514 05:29:34.865678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:34.865737 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" condition "Issuing" to 2026-05-14 05:29:34.865723673 +0000 UTC m=+467.341547334 I0514 05:29:34.888898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:34.888984 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" condition "Ready" to 2026-05-14 05:29:34.888976878 +0000 UTC m=+467.364800499 I0514 05:29:35.044023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:35.076122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rkfk2-jhjtj" condition "Approved" to 2026-05-14 05:29:35.076103414 +0000 UTC m=+467.551927075 I0514 05:29:35.096320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rkfk2-jhjtj" condition "Ready" to 2026-05-14 05:29:35.096305174 +0000 UTC m=+467.572128815 I0514 05:29:35.132690 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:35.132670461 +0000 UTC m=+467.608494102 I0514 05:29:35.161675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rkfk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:51.456347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:29:51.456410 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-14 05:29:51.456399467 +0000 UTC m=+483.932223098 I0514 05:29:51.459585 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 05:29:51.459558162 +0000 UTC m=+483.935381803 I0514 05:29:51.488887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:51.488978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-14 05:29:51.488970776 +0000 UTC m=+483.964794397 I0514 05:29:51.683384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:51.719445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dvq4k" condition "Approved" to 2026-05-14 05:29:51.719424039 +0000 UTC m=+484.195247700 I0514 05:29:51.759634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dvq4k" condition "Ready" to 2026-05-14 05:29:51.759622897 +0000 UTC m=+484.235446538 I0514 05:29:51.813975 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:29:51.813964701 +0000 UTC m=+484.289788322 I0514 05:29:51.850094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:29:51.901445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:16.402133 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-14 05:33:16.402106912 +0000 UTC m=+688.877930563 I0514 05:33:16.404955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:33:16.404982 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 05:33:16.404977747 +0000 UTC m=+688.880801378 I0514 05:33:16.427825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:16.427890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:33:16.427910 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-14 05:33:16.427905027 +0000 UTC m=+688.903728648 I0514 05:33:16.809745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lg9p5" condition "Approved" to 2026-05-14 05:33:16.809729045 +0000 UTC m=+689.285552676 I0514 05:33:16.831526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lg9p5" condition "Ready" to 2026-05-14 05:33:16.831499352 +0000 UTC m=+689.307322973 I0514 05:33:16.868451 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:33:16.868432634 +0000 UTC m=+689.344256285 I0514 05:33:16.894686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:16.895245 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:33:16.895237753 +0000 UTC m=+689.371061384 I0514 05:33:16.915126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:16.924311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:58.579602 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 05:33:58.579591119 +0000 UTC m=+731.055414740 I0514 05:33:58.579949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0514 05:33:58.579989 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-14 05:33:58.57998513 +0000 UTC m=+731.055808751 I0514 05:33:58.608549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:58.608597 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-14 05:33:58.60859178 +0000 UTC m=+731.084415401 I0514 05:33:58.932578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0514 05:33:58.968944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tnk5h" condition "Approved" to 2026-05-14 05:33:58.968933771 +0000 UTC m=+731.444757392 I0514 05:33:58.991884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tnk5h" condition "Ready" to 2026-05-14 05:33:58.991873736 +0000 UTC m=+731.467697357 I0514 05:33:59.028332 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-14 05:33:59.028310581 +0000 UTC m=+731.504134202 I0514 05:33:59.054603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"