I0508 18:15:05.516937 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0508 18:15:05.517208 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0508 18:15:05.517382 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0508 18:15:05.521096 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0508 18:15:05.522549 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0508 18:15:05.522618 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0508 18:15:05.522875 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0508 18:15:05.526217 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0508 18:15:05.541813 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0508 18:15:05.547831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0508 18:15:05.553161 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0508 18:15:05.553192 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0508 18:15:05.553291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0508 18:15:05.555791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0508 18:15:05.558242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0508 18:15:05.560642 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0508 18:15:05.560848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0508 18:15:05.562429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0508 18:15:05.564145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0508 18:15:05.571338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0508 18:15:05.574299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0508 18:15:05.579172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0508 18:15:05.581833 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0508 18:15:05.584340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0508 18:15:05.586487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0508 18:15:05.588298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0508 18:15:05.590231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0508 18:15:05.595586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0508 18:15:05.598235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0508 18:15:05.600612 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0508 18:15:05.600639 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0508 18:15:05.600653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0508 18:15:05.600651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0508 18:15:05.604250 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.604760 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.605029 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.614480 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.643468 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.651346 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.667282 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.683136 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.698979 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:05.705188 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0508 18:15:20.362776 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-08 18:15:20.362764255 +0000 UTC m=+14.881254911 I0508 18:15:21.087580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:15:21.087647 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-08 18:15:21.087638111 +0000 UTC m=+15.606128787 I0508 18:15:21.087865 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 18:15:21.087857819 +0000 UTC m=+15.606348495 I0508 18:15:21.117888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:15:21.117952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-08 18:15:21.117945482 +0000 UTC m=+15.636436128 E0508 18:15:21.118680 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 18:15:21.118728 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-08 18:15:21.118713739 +0000 UTC m=+15.637204396 E0508 18:15:21.118754 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 18:15:21.154938 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0508 18:15:21.155600 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 18:15:21.155685 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 18:15:21.155728 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0508 18:15:21.161207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:15:21.186135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-smb6w" condition "Approved" to 2026-05-08 18:15:21.186124295 +0000 UTC m=+15.704614951 I0508 18:15:21.205601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-smb6w" condition "Ready" to 2026-05-08 18:15:21.205591186 +0000 UTC m=+15.724081842 I0508 18:15:21.240167 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:15:21.24015618 +0000 UTC m=+15.758646836 I0508 18:15:21.259586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:15:26.156073 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:15:26.156058848 +0000 UTC m=+20.674549534 I0508 18:16:01.370253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:16:01.370499 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-08 18:16:01.370489431 +0000 UTC m=+55.888980107 I0508 18:16:01.370287 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-08 18:16:01.370280456 +0000 UTC m=+55.888771102 I0508 18:16:01.784849 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-08 18:16:01.784834609 +0000 UTC m=+56.303325285 I0508 18:16:01.830136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:16:01.830262 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-08 18:16:01.83025456 +0000 UTC m=+56.348745216 I0508 18:16:02.187591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:16:02.449643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2zhkb" condition "Approved" to 2026-05-08 18:16:02.449629305 +0000 UTC m=+56.968119981 I0508 18:16:02.548812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2zhkb" condition "Ready" to 2026-05-08 18:16:02.548801225 +0000 UTC m=+57.067291881 I0508 18:16:02.859073 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:16:02.859053348 +0000 UTC m=+57.377544024 I0508 18:16:02.918065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:16:02.918459 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:16:02.918451541 +0000 UTC m=+57.436942197 I0508 18:16:02.959545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:22:05.496674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:22:05.496729 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-05-08 18:22:05.496717934 +0000 UTC m=+420.015208610 I0508 18:22:05.496828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-05-08 18:22:05.496688613 +0000 UTC m=+420.015179319 I0508 18:22:05.612372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:22:05.612465 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-05-08 18:22:05.61245578 +0000 UTC m=+420.130946426 I0508 18:22:06.039188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:22:06.485221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-dn67p" condition "Approved" to 2026-05-08 18:22:06.485207995 +0000 UTC m=+421.003698671 I0508 18:22:06.812550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-dn67p" condition "Ready" to 2026-05-08 18:22:06.812539578 +0000 UTC m=+421.331030234 I0508 18:22:07.295517 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:22:07.29550625 +0000 UTC m=+421.813996896 I0508 18:22:07.680458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:22:09.527916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:23:16.275898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:23:16.275983 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-08 18:23:16.275972109 +0000 UTC m=+490.794462765 I0508 18:23:16.276239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-08 18:23:16.276216972 +0000 UTC m=+490.794707658 E0508 18:23:16.361805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 18:23:16.361882 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-08 18:23:16.36186863 +0000 UTC m=+490.880359306 E0508 18:23:16.361959 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0508 18:23:16.365383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:23:16.365516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:23:16.365562 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-08 18:23:16.365537435 +0000 UTC m=+490.884028091 E0508 18:23:16.400002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0508 18:23:16.400317 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 18:23:16.400379 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0508 18:23:16.400595 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0508 18:23:16.554550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cwws8" condition "Approved" to 2026-05-08 18:23:16.55453527 +0000 UTC m=+491.073025906 I0508 18:23:16.613683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cwws8" condition "Ready" to 2026-05-08 18:23:16.613668913 +0000 UTC m=+491.132159569 I0508 18:23:16.782120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:23:16.782096963 +0000 UTC m=+491.300587639 I0508 18:23:16.833880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:23:21.400733 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:23:21.400714493 +0000 UTC m=+495.919205169 I0508 18:24:10.717646 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-08 18:24:10.717624646 +0000 UTC m=+545.236115292 I0508 18:24:10.717899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:10.717915 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-08 18:24:10.71791247 +0000 UTC m=+545.236403116 I0508 18:24:10.741490 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-08 18:24:10.741478379 +0000 UTC m=+545.259969025 I0508 18:24:10.742246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:10.748485 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-08 18:24:10.748464798 +0000 UTC m=+545.266955474 I0508 18:24:10.742335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:10.751656 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-08 18:24:10.751641875 +0000 UTC m=+545.270132511 I0508 18:24:10.742380 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-08 18:24:10.742372001 +0000 UTC m=+545.260862637 I0508 18:24:10.794927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:10.795026 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-08 18:24:10.795016986 +0000 UTC m=+545.313507642 I0508 18:24:10.796627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:10.796717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:10.796749 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-08 18:24:10.796744061 +0000 UTC m=+545.315234717 I0508 18:24:10.799711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:10.799754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:10.799773 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-08 18:24:10.799768885 +0000 UTC m=+545.318259541 I0508 18:24:11.037887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ld2z2" condition "Approved" to 2026-05-08 18:24:11.037873269 +0000 UTC m=+545.556363945 I0508 18:24:11.072266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ld2z2" condition "Ready" to 2026-05-08 18:24:11.072254762 +0000 UTC m=+545.590745418 I0508 18:24:11.098968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7w584" condition "Approved" to 2026-05-08 18:24:11.098958424 +0000 UTC m=+545.617449070 I0508 18:24:11.120943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7w584" condition "Ready" to 2026-05-08 18:24:11.120934938 +0000 UTC m=+545.639425584 I0508 18:24:11.130283 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:11.130269383 +0000 UTC m=+545.648760039 I0508 18:24:11.154078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.154392 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:11.154386138 +0000 UTC m=+545.672876784 I0508 18:24:11.165423 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:11.165408896 +0000 UTC m=+545.683899542 I0508 18:24:11.182692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.189012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.189212 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:11.189205267 +0000 UTC m=+545.707695913 I0508 18:24:11.192379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.439560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.508908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:11.599398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lwwsn" condition "Approved" to 2026-05-08 18:24:11.599381814 +0000 UTC m=+546.117872470 I0508 18:24:11.905984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lwwsn" condition "Ready" to 2026-05-08 18:24:11.905973327 +0000 UTC m=+546.424463973 I0508 18:24:12.147784 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:12.147770099 +0000 UTC m=+546.666260755 I0508 18:24:12.245113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:12.245454 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:12.245447728 +0000 UTC m=+546.763938384 I0508 18:24:12.446287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:41.080190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:24:41.080233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" condition "Issuing" to 2026-05-08 18:24:41.080222032 +0000 UTC m=+575.598712708 I0508 18:24:41.080712 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" condition "Ready" to 2026-05-08 18:24:41.08007138 +0000 UTC m=+575.598562066 I0508 18:24:41.286298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j96sn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:41.286366 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" condition "Ready" to 2026-05-08 18:24:41.286358011 +0000 UTC m=+575.804848667 I0508 18:24:42.084451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j96sn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:42.435038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j96sn-kmphx" condition "Approved" to 2026-05-08 18:24:42.435018038 +0000 UTC m=+576.953508714 I0508 18:24:42.681161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j96sn-kmphx" condition "Ready" to 2026-05-08 18:24:42.681145962 +0000 UTC m=+577.199636648 I0508 18:24:43.872590 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:43.872577538 +0000 UTC m=+578.391068184 I0508 18:24:44.398438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j96sn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:44.398813 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:24:44.398804622 +0000 UTC m=+578.917295278 I0508 18:24:44.513208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j96sn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:24:44.586227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j96sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j96sn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:25:34.072392 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-08 18:25:34.07235644 +0000 UTC m=+628.590847086 I0508 18:25:34.072493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:25:34.072523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 18:25:34.072515702 +0000 UTC m=+628.591006338 I0508 18:25:34.092007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:25:34.092057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:25:34.092068 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-08 18:25:34.092064236 +0000 UTC m=+628.610554882 I0508 18:25:34.691430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xjpcd" condition "Approved" to 2026-05-08 18:25:34.691419157 +0000 UTC m=+629.209909803 I0508 18:25:34.712271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xjpcd" condition "Ready" to 2026-05-08 18:25:34.712251318 +0000 UTC m=+629.230741994 I0508 18:25:34.750776 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:25:34.750755468 +0000 UTC m=+629.269246144 I0508 18:25:34.780042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.506768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:28:39.506922 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-08 18:28:39.506830592 +0000 UTC m=+814.025321278 I0508 18:28:39.507490 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 18:28:39.507480802 +0000 UTC m=+814.025971478 I0508 18:28:39.533680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.533740 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-08 18:28:39.533734409 +0000 UTC m=+814.052225065 I0508 18:28:39.765005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.810548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g87dg" condition "Approved" to 2026-05-08 18:28:39.810533508 +0000 UTC m=+814.329024164 I0508 18:28:39.830153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g87dg" condition "Ready" to 2026-05-08 18:28:39.830143405 +0000 UTC m=+814.348634061 I0508 18:28:39.861983 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:28:39.861966628 +0000 UTC m=+814.380457314 I0508 18:28:39.881830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.882353 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:28:39.882345649 +0000 UTC m=+814.400836305 I0508 18:28:39.889097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.904821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:28:39.905001 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:28:39.904995581 +0000 UTC m=+814.423486227 I0508 18:28:39.905290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:29:20.909302 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 18:29:20.909235046 +0000 UTC m=+855.427725732 I0508 18:29:20.910332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0508 18:29:20.910370 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-08 18:29:20.910362539 +0000 UTC m=+855.428853225 I0508 18:29:20.931387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:29:20.933057 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-08 18:29:20.933026938 +0000 UTC m=+855.451517604 I0508 18:29:21.206222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:29:21.239339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h8w9t" condition "Approved" to 2026-05-08 18:29:21.239326442 +0000 UTC m=+855.757817098 I0508 18:29:21.262230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h8w9t" condition "Ready" to 2026-05-08 18:29:21.262217845 +0000 UTC m=+855.780708501 I0508 18:29:21.298554 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:29:21.298531858 +0000 UTC m=+855.817022514 I0508 18:29:21.320169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0508 18:29:21.320570 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-08 18:29:21.320526856 +0000 UTC m=+855.839017512 I0508 18:29:21.350588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"