I0511 21:01:19.110242 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0511 21:01:19.110351 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0511 21:01:19.110421 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0511 21:01:19.113861 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0511 21:01:19.114621 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0511 21:01:19.114634 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0511 21:01:19.114716 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0511 21:01:19.118998 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0511 21:01:19.134097 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0511 21:01:19.134405 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0511 21:01:19.140456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0511 21:01:19.145074 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0511 21:01:19.149465 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0511 21:01:19.149647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0511 21:01:19.157049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0511 21:01:19.160531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0511 21:01:19.162551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0511 21:01:19.164489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0511 21:01:19.166389 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0511 21:01:19.166411 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0511 21:01:19.166536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0511 21:01:19.168468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0511 21:01:19.170370 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0511 21:01:19.170473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0511 21:01:19.172939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0511 21:01:19.179474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0511 21:01:19.182270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0511 21:01:19.184462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0511 21:01:19.186655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0511 21:01:19.188362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0511 21:01:19.188480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0511 21:01:19.190356 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0511 21:01:19.192063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0511 21:01:19.195544 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.196095 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.196580 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.198521 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.215985 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.250599 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.265980 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.283524 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.286239 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:19.301702 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 21:01:30.294062 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-11 21:01:30.294048687 +0000 UTC m=+11.226647411 I0511 21:01:31.006949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:01:31.007020 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 21:01:31.007013582 +0000 UTC m=+11.939612306 I0511 21:01:31.007974 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 21:01:31.007969407 +0000 UTC m=+11.940568131 E0511 21:01:31.024483 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 21:01:31.024722 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-11 21:01:31.024715173 +0000 UTC m=+11.957313897 E0511 21:01:31.024852 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 21:01:31.029721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:31.029846 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 21:01:31.029836132 +0000 UTC m=+11.962434856 E0511 21:01:31.038308 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0511 21:01:31.038392 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 21:01:31.038419 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 21:01:31.038453 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0511 21:01:31.047062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:31.076826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7jkq" condition "Approved" to 2026-05-11 21:01:31.076799639 +0000 UTC m=+12.009398353 I0511 21:01:31.090205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7jkq" condition "Ready" to 2026-05-11 21:01:31.090190493 +0000 UTC m=+12.022789247 I0511 21:01:31.121008 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:01:31.120997521 +0000 UTC m=+12.053596225 I0511 21:01:31.136833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:31.172302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:36.040007 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:01:36.039988959 +0000 UTC m=+16.972587703 I0511 21:01:58.920743 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 21:01:58.920608474 +0000 UTC m=+39.853207188 I0511 21:01:58.926343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:01:58.926400 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 21:01:58.926389475 +0000 UTC m=+39.858988179 I0511 21:01:58.946250 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-11 21:01:58.946233441 +0000 UTC m=+39.878832155 I0511 21:01:58.968119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:58.968178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:01:58.968192 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 21:01:58.968185332 +0000 UTC m=+39.900784046 I0511 21:01:59.160438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:59.167040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pdcq4" condition "Approved" to 2026-05-11 21:01:59.167025756 +0000 UTC m=+40.099624480 I0511 21:01:59.203175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pdcq4" condition "Ready" to 2026-05-11 21:01:59.203160588 +0000 UTC m=+40.135759322 I0511 21:01:59.231364 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:01:59.231352024 +0000 UTC m=+40.163950728 I0511 21:01:59.263254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:01:59.263679 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:01:59.263671217 +0000 UTC m=+40.196269931 I0511 21:01:59.296155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:06:25.064346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:06:25.064472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-05-11 21:06:25.064372727 +0000 UTC m=+305.996971451 I0511 21:06:25.064745 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-05-11 21:06:25.064718895 +0000 UTC m=+305.997317649 I0511 21:06:25.082147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:06:25.082363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-05-11 21:06:25.082348475 +0000 UTC m=+306.014947229 I0511 21:06:25.276023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:06:25.304524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-g64sk" condition "Approved" to 2026-05-11 21:06:25.30451367 +0000 UTC m=+306.237112394 I0511 21:06:25.333025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-g64sk" condition "Ready" to 2026-05-11 21:06:25.333012541 +0000 UTC m=+306.265611265 I0511 21:06:25.359479 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:06:25.359469741 +0000 UTC m=+306.292068455 I0511 21:06:25.379556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:06:25.380223 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:06:25.380215619 +0000 UTC m=+306.312814343 I0511 21:06:25.395769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:06:25.396031 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:06:25.396025504 +0000 UTC m=+306.328624228 I0511 21:07:30.877093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:07:30.877144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-11 21:07:30.87713485 +0000 UTC m=+371.809733594 I0511 21:07:30.877088 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-11 21:07:30.876959077 +0000 UTC m=+371.809557801 I0511 21:07:30.894060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:07:30.894157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:07:30.894205 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-11 21:07:30.894197546 +0000 UTC m=+371.826796260 E0511 21:07:30.902989 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 21:07:30.903048 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-11 21:07:30.90303932 +0000 UTC m=+371.835638044 E0511 21:07:30.903099 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 21:07:30.923690 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0511 21:07:30.923966 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 21:07:30.924008 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 21:07:30.924066 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0511 21:07:30.940762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:07:30.946904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-68j8p" condition "Approved" to 2026-05-11 21:07:30.946885753 +0000 UTC m=+371.879484477 I0511 21:07:30.961788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-68j8p" condition "Ready" to 2026-05-11 21:07:30.961768366 +0000 UTC m=+371.894367120 I0511 21:07:30.986902 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:07:30.986888181 +0000 UTC m=+371.919486905 I0511 21:07:31.004944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:07:35.926429 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:07:35.926413192 +0000 UTC m=+376.859011936 I0511 21:08:18.499786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:18.499857 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-11 21:08:18.499820831 +0000 UTC m=+419.432419555 I0511 21:08:18.500438 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-11 21:08:18.500432531 +0000 UTC m=+419.433031255 I0511 21:08:18.504988 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-11 21:08:18.504981319 +0000 UTC m=+419.437580043 I0511 21:08:18.505294 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:18.505324 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-11 21:08:18.505319666 +0000 UTC m=+419.437918390 I0511 21:08:18.515016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-11 21:08:18.515002932 +0000 UTC m=+419.447601636 I0511 21:08:18.515123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:18.515162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-11 21:08:18.515153805 +0000 UTC m=+419.447752529 I0511 21:08:18.553542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.553640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:18.553672 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-11 21:08:18.553664357 +0000 UTC m=+419.486263081 I0511 21:08:18.554372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.555146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.555198 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-11 21:08:18.555193213 +0000 UTC m=+419.487791947 I0511 21:08:18.557689 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-11 21:08:18.557676756 +0000 UTC m=+419.490275460 I0511 21:08:18.800405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.832232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7qtkn" condition "Approved" to 2026-05-11 21:08:18.83222046 +0000 UTC m=+419.764819174 I0511 21:08:18.832972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-trvbg" condition "Approved" to 2026-05-11 21:08:18.832967393 +0000 UTC m=+419.765566107 I0511 21:08:18.857429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7qtkn" condition "Ready" to 2026-05-11 21:08:18.857419854 +0000 UTC m=+419.790018558 I0511 21:08:18.861979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-trvbg" condition "Ready" to 2026-05-11 21:08:18.861975062 +0000 UTC m=+419.794573776 I0511 21:08:18.910048 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:18.910033799 +0000 UTC m=+419.842632503 I0511 21:08:18.919612 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:18.919601773 +0000 UTC m=+419.852200487 I0511 21:08:18.942007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.942701 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:18.942692921 +0000 UTC m=+419.875291645 I0511 21:08:18.943154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.955020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:18.987032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:19.367584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:19.772379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wlk8q" condition "Approved" to 2026-05-11 21:08:19.772366545 +0000 UTC m=+420.704965269 I0511 21:08:19.833441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wlk8q" condition "Ready" to 2026-05-11 21:08:19.833435783 +0000 UTC m=+420.766034497 I0511 21:08:20.321522 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-wlk8q" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-9rfkg" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0511 21:08:20.476990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xdqq4" condition "Approved" to 2026-05-11 21:08:20.476973018 +0000 UTC m=+421.409571742 I0511 21:08:20.783463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xdqq4" condition "Ready" to 2026-05-11 21:08:20.783451447 +0000 UTC m=+421.716050171 I0511 21:08:21.020496 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:21.020480624 +0000 UTC m=+421.953079348 I0511 21:08:21.120906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:21.121863 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:21.121848316 +0000 UTC m=+422.054447070 I0511 21:08:21.372195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:21.425644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.390245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:26.390282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Issuing" to 2026-05-11 21:08:26.390273213 +0000 UTC m=+427.322871937 I0511 21:08:26.390788 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Ready" to 2026-05-11 21:08:26.390736581 +0000 UTC m=+427.323335335 I0511 21:08:26.404363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.404431 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Ready" to 2026-05-11 21:08:26.404424541 +0000 UTC m=+427.337023265 I0511 21:08:26.678288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.710253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7fxgr-9vvlr" condition "Approved" to 2026-05-11 21:08:26.710236512 +0000 UTC m=+427.642835226 I0511 21:08:26.737457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7fxgr-9vvlr" condition "Ready" to 2026-05-11 21:08:26.737445832 +0000 UTC m=+427.670044546 I0511 21:08:26.788757 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:26.788736007 +0000 UTC m=+427.721334721 I0511 21:08:26.814962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.815183 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:26.815174684 +0000 UTC m=+427.747773388 I0511 21:08:26.832433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.846541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:26.846758 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7fxgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:26.846749356 +0000 UTC m=+427.779348060 I0511 21:08:39.062273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:39.062314 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-11 21:08:39.06230506 +0000 UTC m=+439.994903784 I0511 21:08:39.063395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-11 21:08:39.063388718 +0000 UTC m=+439.995987442 I0511 21:08:39.088427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:39.088616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:08:39.088680 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-11 21:08:39.088670502 +0000 UTC m=+440.021269226 I0511 21:08:39.250904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tlc9b" condition "Approved" to 2026-05-11 21:08:39.250879369 +0000 UTC m=+440.183478073 I0511 21:08:39.274459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tlc9b" condition "Ready" to 2026-05-11 21:08:39.274440906 +0000 UTC m=+440.207039630 I0511 21:08:39.309770 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:08:39.309752553 +0000 UTC m=+440.242351287 I0511 21:08:39.329594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:08:39.386645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:11:55.494741 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-11 21:11:55.494699897 +0000 UTC m=+636.427298621 I0511 21:11:55.495318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:11:55.495366 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-11 21:11:55.495353676 +0000 UTC m=+636.427952420 I0511 21:11:55.514392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:11:55.514508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:11:55.514535 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-11 21:11:55.514527521 +0000 UTC m=+636.447126245 I0511 21:11:55.687857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xkrfc" condition "Approved" to 2026-05-11 21:11:55.687833942 +0000 UTC m=+636.620432686 I0511 21:11:55.706532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xkrfc" condition "Ready" to 2026-05-11 21:11:55.706521261 +0000 UTC m=+636.639119985 I0511 21:11:55.738759 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:11:55.738736953 +0000 UTC m=+636.671335677 I0511 21:11:55.762099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:11:55.814819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:12:37.814613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:12:37.814733 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-11 21:12:37.81472263 +0000 UTC m=+678.747321344 I0511 21:12:37.815367 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-11 21:12:37.815357699 +0000 UTC m=+678.747956423 I0511 21:12:37.833710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:12:37.833942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 21:12:37.833985 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-11 21:12:37.83396064 +0000 UTC m=+678.766559364 I0511 21:12:38.066995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 21:12:38.082878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fwkwq" condition "Approved" to 2026-05-11 21:12:38.082855897 +0000 UTC m=+679.015454651 I0511 21:12:38.098518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fwkwq" condition "Ready" to 2026-05-11 21:12:38.098505283 +0000 UTC m=+679.031103987 I0511 21:12:38.131532 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 21:12:38.131509935 +0000 UTC m=+679.064108659 I0511 21:12:38.156675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"