I0520 11:24:03.312879 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 11:24:03.312972 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 11:24:03.313042 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 11:24:03.319885 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 11:24:03.320877 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 11:24:03.320971 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 11:24:03.321259 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 11:24:03.324352 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 11:24:03.337172 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 11:24:03.337406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 11:24:03.337453 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 11:24:03.342345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 11:24:03.346141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 11:24:03.350960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 11:24:03.353148 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 11:24:03.353171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 11:24:03.353179 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 11:24:03.353214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 11:24:03.355758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 11:24:03.358199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 11:24:03.360716 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 11:24:03.362488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 11:24:03.364562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 11:24:03.370084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 11:24:03.373617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 11:24:03.375991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 11:24:03.378524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 11:24:03.380783 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 11:24:03.380808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 11:24:03.382527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 11:24:03.384394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 11:24:03.386315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 11:24:03.392871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 11:24:03.395522 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.395529 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.395924 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.396560 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.409292 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.423603 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.439498 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.460586 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.473966 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:03.487998 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 11:24:15.132316 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 11:24:15.132293023 +0000 UTC m=+11.847141018 I0520 11:24:15.815094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:24:15.815137 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 11:24:15.815129492 +0000 UTC m=+12.529977467 I0520 11:24:15.815531 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 11:24:15.815515643 +0000 UTC m=+12.530363648 E0520 11:24:15.829487 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 11:24:15.829548 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 11:24:15.829540922 +0000 UTC m=+12.544388897 E0520 11:24:15.829570 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 11:24:15.835254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:15.835372 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 11:24:15.83536376 +0000 UTC m=+12.550211735 E0520 11:24:15.848949 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 11:24:15.849039 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 11:24:15.849072 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 11:24:15.849122 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 11:24:15.854720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:15.872604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fmp6t" condition "Approved" to 2026-05-20 11:24:15.872591648 +0000 UTC m=+12.587439623 I0520 11:24:15.883891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fmp6t" condition "Ready" to 2026-05-20 11:24:15.883877924 +0000 UTC m=+12.598725909 I0520 11:24:15.904223 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:24:15.904209544 +0000 UTC m=+12.619057509 I0520 11:24:15.920273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:15.920686 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:24:15.920679139 +0000 UTC m=+12.635527114 I0520 11:24:15.934348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:15.934645 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:24:15.934637437 +0000 UTC m=+12.649485412 I0520 11:24:20.849682 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:24:20.849665226 +0000 UTC m=+17.564513231 I0520 11:24:46.483500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:24:46.483602 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 11:24:46.483583325 +0000 UTC m=+43.198431320 I0520 11:24:46.483543 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 11:24:46.483533944 +0000 UTC m=+43.198381929 I0520 11:24:46.502205 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 11:24:46.502190979 +0000 UTC m=+43.217038964 I0520 11:24:46.514437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:46.514597 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 11:24:46.514588909 +0000 UTC m=+43.229436884 I0520 11:24:46.647614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:24:46.680019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7scwm" condition "Approved" to 2026-05-20 11:24:46.680009974 +0000 UTC m=+43.394857939 I0520 11:24:46.716279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7scwm" condition "Ready" to 2026-05-20 11:24:46.716265872 +0000 UTC m=+43.431113847 I0520 11:24:46.745677 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:24:46.7456435 +0000 UTC m=+43.460491475 I0520 11:24:46.769606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:29:26.094392 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-115.nip.io-tls" condition "Ready" to 2026-05-20 11:29:26.094365287 +0000 UTC m=+322.809213262 I0520 11:29:26.094488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:29:26.094573 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-115.nip.io-tls" condition "Issuing" to 2026-05-20 11:29:26.094560882 +0000 UTC m=+322.809408957 I0520 11:29:26.176893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:29:26.177312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:29:26.177522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-115.nip.io-tls" condition "Issuing" to 2026-05-20 11:29:26.177492939 +0000 UTC m=+322.892340984 I0520 11:29:26.569993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:29:26.580838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-115.nip.io-tls-dmwvg" condition "Approved" to 2026-05-20 11:29:26.580829374 +0000 UTC m=+323.295677349 I0520 11:29:26.610024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-115.nip.io-tls-dmwvg" condition "Ready" to 2026-05-20 11:29:26.610013935 +0000 UTC m=+323.324861900 I0520 11:29:26.642716 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:29:26.642703622 +0000 UTC m=+323.357551597 I0520 11:29:26.664274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:29:26.725861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:30:27.984131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:30:27.984266 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 11:30:27.984237408 +0000 UTC m=+384.699085403 I0520 11:30:27.984249 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 11:30:27.984235918 +0000 UTC m=+384.699083923 E0520 11:30:27.995348 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 11:30:27.995383 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 11:30:27.995376056 +0000 UTC m=+384.710224031 E0520 11:30:27.995438 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 11:30:27.999484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:30:27.999550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:30:27.999569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 11:30:27.999563856 +0000 UTC m=+384.714411831 E0520 11:30:28.010731 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 11:30:28.012407 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 11:30:28.012444 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 11:30:28.012490 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 11:30:28.031736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cmlnj" condition "Approved" to 2026-05-20 11:30:28.031724395 +0000 UTC m=+384.746572370 I0520 11:30:28.033113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:30:28.044385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cmlnj" condition "Ready" to 2026-05-20 11:30:28.044369207 +0000 UTC m=+384.759217212 I0520 11:30:28.065311 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:30:28.065299255 +0000 UTC m=+384.780147210 I0520 11:30:28.081587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:30:33.011531 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:30:33.011491961 +0000 UTC m=+389.726339956 I0520 11:31:19.609587 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 11:31:19.609537385 +0000 UTC m=+436.324385390 I0520 11:31:19.610061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:19.610230 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 11:31:19.610222748 +0000 UTC m=+436.325070733 I0520 11:31:19.610778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:19.610802 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 11:31:19.61079903 +0000 UTC m=+436.325646995 I0520 11:31:19.611087 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 11:31:19.611082795 +0000 UTC m=+436.325930760 I0520 11:31:19.611360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:19.611381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 11:31:19.611377481 +0000 UTC m=+436.326225446 I0520 11:31:19.610150 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 11:31:19.610142856 +0000 UTC m=+436.324990831 I0520 11:31:19.913767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:19.913820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:19.913835 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 11:31:19.913830429 +0000 UTC m=+436.628678394 I0520 11:31:19.918880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:19.918927 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 11:31:19.918922629 +0000 UTC m=+436.633770604 I0520 11:31:19.925002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:19.925085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 11:31:19.925077671 +0000 UTC m=+436.639925676 I0520 11:31:20.701268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:20.720143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:20.802454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pt479" condition "Approved" to 2026-05-20 11:31:20.80244353 +0000 UTC m=+437.517291505 I0520 11:31:20.804441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-95hd9" condition "Approved" to 2026-05-20 11:31:20.804429559 +0000 UTC m=+437.519277524 I0520 11:31:20.825913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-flgp2" condition "Approved" to 2026-05-20 11:31:20.825898321 +0000 UTC m=+437.540746296 I0520 11:31:20.848373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pt479" condition "Ready" to 2026-05-20 11:31:20.848359014 +0000 UTC m=+437.563206989 I0520 11:31:20.849997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-95hd9" condition "Ready" to 2026-05-20 11:31:20.849991587 +0000 UTC m=+437.564839562 I0520 11:31:20.853270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-flgp2" condition "Ready" to 2026-05-20 11:31:20.853252581 +0000 UTC m=+437.568100556 I0520 11:31:20.899042 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:20.899033432 +0000 UTC m=+437.613881397 I0520 11:31:20.917667 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:20.91765368 +0000 UTC m=+437.632501645 I0520 11:31:20.919159 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:20.91915392 +0000 UTC m=+437.634001885 I0520 11:31:20.943403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:20.943666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:20.948995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:21.508097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:32.963924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Ready" to 2026-05-20 11:31:32.963907962 +0000 UTC m=+449.678755947 I0520 11:31:32.963947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:32.964145 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Issuing" to 2026-05-20 11:31:32.964136516 +0000 UTC m=+449.678984491 I0520 11:31:32.981556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:32.981614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:31:32.981629 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Issuing" to 2026-05-20 11:31:32.981621726 +0000 UTC m=+449.696469701 I0520 11:31:33.334872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7f5cc-bcfqz" condition "Approved" to 2026-05-20 11:31:33.334858919 +0000 UTC m=+450.049706904 I0520 11:31:33.361209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7f5cc-bcfqz" condition "Ready" to 2026-05-20 11:31:33.361194058 +0000 UTC m=+450.076042063 I0520 11:31:33.391470 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:33.391462175 +0000 UTC m=+450.106310140 I0520 11:31:33.411661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:33.412533 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:33.412526532 +0000 UTC m=+450.127374497 I0520 11:31:33.432015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:31:33.434470 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f5cc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:31:33.434458987 +0000 UTC m=+450.149306982 I0520 11:32:06.761251 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 11:32:06.761179289 +0000 UTC m=+483.476027264 I0520 11:32:06.761280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:32:06.761312 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 11:32:06.761304721 +0000 UTC m=+483.476152686 I0520 11:32:06.778993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:32:06.779086 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 11:32:06.779080323 +0000 UTC m=+483.493928288 I0520 11:32:06.940181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:32:06.966623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jcs7" condition "Approved" to 2026-05-20 11:32:06.966609442 +0000 UTC m=+483.681457417 I0520 11:32:07.160740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jcs7" condition "Ready" to 2026-05-20 11:32:07.160728021 +0000 UTC m=+483.875575996 I0520 11:32:07.191959 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:32:07.191946754 +0000 UTC m=+483.906794729 I0520 11:32:07.221532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:34:56.847096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:34:56.847097 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 11:34:56.84704928 +0000 UTC m=+653.561897285 I0520 11:34:56.847136 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 11:34:56.847127802 +0000 UTC m=+653.561975767 I0520 11:34:56.872754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:34:56.873029 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 11:34:56.872989429 +0000 UTC m=+653.587837434 I0520 11:34:56.997240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:34:57.027780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kctl2" condition "Approved" to 2026-05-20 11:34:57.027769903 +0000 UTC m=+653.742617858 I0520 11:34:57.043239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kctl2" condition "Ready" to 2026-05-20 11:34:57.043233244 +0000 UTC m=+653.758081199 I0520 11:34:57.072323 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:34:57.072309676 +0000 UTC m=+653.787157651 I0520 11:34:57.090893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:35:36.976561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 11:35:36.976609 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 11:35:36.976603794 +0000 UTC m=+693.691451759 I0520 11:35:36.977033 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 11:35:36.977022971 +0000 UTC m=+693.691870966 I0520 11:35:37.000957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:35:37.000993 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 11:35:37.000989182 +0000 UTC m=+693.715837157 I0520 11:35:37.182535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:35:37.211964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vcjgf" condition "Approved" to 2026-05-20 11:35:37.211944519 +0000 UTC m=+693.926792514 I0520 11:35:37.232610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vcjgf" condition "Ready" to 2026-05-20 11:35:37.232601854 +0000 UTC m=+693.947449819 I0520 11:35:37.261643 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 11:35:37.261633079 +0000 UTC m=+693.976481054 I0520 11:35:37.282946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 11:35:37.341670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"