I0429 01:52:52.247312 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0429 01:52:52.248038 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0429 01:52:52.248414 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0429 01:52:52.253582 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0429 01:52:52.254116 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0429 01:52:52.254127 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0429 01:52:52.254163 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0429 01:52:52.257340 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0429 01:52:52.272797 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0429 01:52:52.273228 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0429 01:52:52.277260 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0429 01:52:52.280292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0429 01:52:52.285457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0429 01:52:52.287917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0429 01:52:52.290563 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0429 01:52:52.290598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0429 01:52:52.290656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0429 01:52:52.293061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0429 01:52:52.295345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0429 01:52:52.297291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0429 01:52:52.300763 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0429 01:52:52.300812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0429 01:52:52.300833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0429 01:52:52.305344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0429 01:52:52.307660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0429 01:52:52.309485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0429 01:52:52.311246 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0429 01:52:52.311383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0429 01:52:52.313192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0429 01:52:52.314836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0429 01:52:52.316700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0429 01:52:52.318440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0429 01:52:52.325293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0429 01:52:52.329076 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.329188 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.329729 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.329779 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.355983 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.375009 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.385702 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.401586 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.412709 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:52:52.423529 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0429 01:53:08.347763 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-29 01:53:08.347738974 +0000 UTC m=+16.135710368 I0429 01:53:09.100962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:53:09.101035 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-29 01:53:09.101026174 +0000 UTC m=+16.888997538 I0429 01:53:09.101895 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-29 01:53:09.101889451 +0000 UTC m=+16.889860815 I0429 01:53:09.117271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:09.117402 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-29 01:53:09.117344209 +0000 UTC m=+16.905315583 E0429 01:53:09.118444 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0429 01:53:09.118509 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-29 01:53:09.118503836 +0000 UTC m=+16.906475200 E0429 01:53:09.118575 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0429 01:53:09.133046 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0429 01:53:09.133221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0429 01:53:09.133262 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0429 01:53:09.133300 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0429 01:53:09.142379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:09.142491 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-29 01:53:09.142482223 +0000 UTC m=+16.930453597 I0429 01:53:09.143504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5s8lh" condition "Approved" to 2026-04-29 01:53:09.143490936 +0000 UTC m=+16.931462300 I0429 01:53:09.161273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5s8lh" condition "Ready" to 2026-04-29 01:53:09.161257607 +0000 UTC m=+16.949228971 I0429 01:53:09.162623 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-29 01:53:09.162610131 +0000 UTC m=+16.950581495 I0429 01:53:09.174766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:09.190804 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:53:09.190794821 +0000 UTC m=+16.978766185 I0429 01:53:09.207418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:09.207857 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:53:09.20784675 +0000 UTC m=+16.995818134 I0429 01:53:09.228200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:14.134168 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:53:14.134157704 +0000 UTC m=+21.922129048 I0429 01:53:36.496860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:53:36.496921 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-29 01:53:36.496911387 +0000 UTC m=+44.284882741 I0429 01:53:36.497913 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-29 01:53:36.49790998 +0000 UTC m=+44.285881334 I0429 01:53:36.517750 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-29 01:53:36.517736586 +0000 UTC m=+44.305707940 I0429 01:53:36.537879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:36.537964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:53:36.538223 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-29 01:53:36.537982473 +0000 UTC m=+44.325953827 I0429 01:53:36.835292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wcsst" condition "Approved" to 2026-04-29 01:53:36.835274993 +0000 UTC m=+44.623246357 I0429 01:53:36.872689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wcsst" condition "Ready" to 2026-04-29 01:53:36.872671831 +0000 UTC m=+44.660643215 I0429 01:53:36.905561 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:53:36.905549441 +0000 UTC m=+44.693520795 I0429 01:53:36.925870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:53:36.926154 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:53:36.926146785 +0000 UTC m=+44.714118169 I0429 01:53:36.946048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:57:52.022871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready" to 2026-04-29 01:57:52.022843057 +0000 UTC m=+299.810814421 I0429 01:57:52.023543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-53.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:57:52.023566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Issuing" to 2026-04-29 01:57:52.023561528 +0000 UTC m=+299.811532892 I0429 01:57:52.058242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:57:52.058352 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready" to 2026-04-29 01:57:52.05832546 +0000 UTC m=+299.846296844 I0429 01:57:52.149359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:57:52.175577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-xr9tt" condition "Approved" to 2026-04-29 01:57:52.175566271 +0000 UTC m=+299.963537625 I0429 01:57:52.200071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-xr9tt" condition "Ready" to 2026-04-29 01:57:52.200059868 +0000 UTC m=+299.988031222 I0429 01:57:52.231569 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:57:52.231559384 +0000 UTC m=+300.019530748 I0429 01:57:52.248353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:58:56.216190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-29 01:58:56.216037507 +0000 UTC m=+364.004008871 I0429 01:58:56.216258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:58:56.216278 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-29 01:58:56.216273512 +0000 UTC m=+364.004244876 E0429 01:58:56.240344 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0429 01:58:56.240400 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-29 01:58:56.240389457 +0000 UTC m=+364.028360811 E0429 01:58:56.240500 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0429 01:58:56.246607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:58:56.246752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:58:56.246805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-29 01:58:56.246795724 +0000 UTC m=+364.034767088 E0429 01:58:56.254467 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0429 01:58:56.254688 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0429 01:58:56.254864 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0429 01:58:56.255002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0429 01:58:56.330159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4hvwc" condition "Approved" to 2026-04-29 01:58:56.330144349 +0000 UTC m=+364.118115733 I0429 01:58:56.358682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4hvwc" condition "Ready" to 2026-04-29 01:58:56.358672075 +0000 UTC m=+364.146643429 I0429 01:58:56.386180 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:58:56.386161896 +0000 UTC m=+364.174133290 I0429 01:58:56.406515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:58:56.406839 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:58:56.406832801 +0000 UTC m=+364.194804175 I0429 01:58:56.422024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:58:56.426788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:01.255651 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:01.255638749 +0000 UTC m=+369.043610103 I0429 01:59:41.343937 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-29 01:59:41.343886683 +0000 UTC m=+409.131858037 I0429 01:59:41.345805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:41.345841 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-29 01:59:41.345835362 +0000 UTC m=+409.133806716 I0429 01:59:41.348298 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-29 01:59:41.348287221 +0000 UTC m=+409.136258575 I0429 01:59:41.348346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:41.348363 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-29 01:59:41.348359413 +0000 UTC m=+409.136330767 I0429 01:59:41.384706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.384804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.384941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-29 01:59:41.384934451 +0000 UTC m=+409.172905805 I0429 01:59:41.384987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:41.385293 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-29 01:59:41.385286688 +0000 UTC m=+409.173258042 I0429 01:59:41.385427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-29 01:59:41.385421101 +0000 UTC m=+409.173392455 I0429 01:59:41.385867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:41.385889 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-29 01:59:41.38588546 +0000 UTC m=+409.173856814 I0429 01:59:41.425631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.425721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:41.425754 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-29 01:59:41.425748444 +0000 UTC m=+409.213719808 I0429 01:59:41.887234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.899027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kq5sw" condition "Approved" to 2026-04-29 01:59:41.899019001 +0000 UTC m=+409.686990355 I0429 01:59:41.899597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jfnnc" condition "Approved" to 2026-04-29 01:59:41.899586162 +0000 UTC m=+409.687557516 I0429 01:59:41.916196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kq5sw" condition "Ready" to 2026-04-29 01:59:41.916183123 +0000 UTC m=+409.704154487 I0429 01:59:41.919427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jfnnc" condition "Ready" to 2026-04-29 01:59:41.919418868 +0000 UTC m=+409.707390232 I0429 01:59:41.960030 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:41.960014696 +0000 UTC m=+409.747986040 I0429 01:59:41.969920 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:41.969906474 +0000 UTC m=+409.757877828 I0429 01:59:41.984987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.987222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.987561 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:41.987554455 +0000 UTC m=+409.775525809 I0429 01:59:41.997316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:41.998762 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:41.998753798 +0000 UTC m=+409.786725152 I0429 01:59:42.036174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:42.077743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:42.130926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xrl9d" condition "Approved" to 2026-04-29 01:59:42.130908482 +0000 UTC m=+409.918879856 I0429 01:59:42.331832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xrl9d" condition "Ready" to 2026-04-29 01:59:42.331821504 +0000 UTC m=+410.119792858 I0429 01:59:42.778189 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:42.778172359 +0000 UTC m=+410.566143723 I0429 01:59:42.884602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:43.176521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:54.693180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:54.693216 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" condition "Issuing" to 2026-04-29 01:59:54.693207985 +0000 UTC m=+422.481179349 I0429 01:59:54.693678 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" condition "Ready" to 2026-04-29 01:59:54.693673325 +0000 UTC m=+422.481644679 I0429 01:59:54.716067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:54.716205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 01:59:54.716228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" condition "Issuing" to 2026-04-29 01:59:54.716221278 +0000 UTC m=+422.504192642 I0429 01:59:54.973715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lbvcr-4gtms" condition "Approved" to 2026-04-29 01:59:54.973692616 +0000 UTC m=+422.761663990 I0429 01:59:54.992561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lbvcr-4gtms" condition "Ready" to 2026-04-29 01:59:54.992550808 +0000 UTC m=+422.780522162 I0429 01:59:55.026641 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:55.026624831 +0000 UTC m=+422.814596195 I0429 01:59:55.052011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:55.052371 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 01:59:55.052363795 +0000 UTC m=+422.840335159 I0429 01:59:55.058588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 01:59:55.071600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lbvcr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:00:05.554561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 02:00:05.554612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-29 02:00:05.554557323 +0000 UTC m=+433.342528677 I0429 02:00:05.554612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-29 02:00:05.554593294 +0000 UTC m=+433.342564678 I0429 02:00:05.575847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:00:05.575939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 02:00:05.575964 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-29 02:00:05.575954252 +0000 UTC m=+433.363925616 I0429 02:00:06.052267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7mn98" condition "Approved" to 2026-04-29 02:00:06.052248157 +0000 UTC m=+433.840219521 I0429 02:00:06.073537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7mn98" condition "Ready" to 2026-04-29 02:00:06.073525033 +0000 UTC m=+433.861496397 I0429 02:00:06.106400 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 02:00:06.106342655 +0000 UTC m=+433.894314009 I0429 02:00:06.132559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:03:21.998915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 02:03:21.998991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-29 02:03:21.998981667 +0000 UTC m=+629.786953031 I0429 02:03:21.999286 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-29 02:03:21.99926612 +0000 UTC m=+629.787237504 I0429 02:03:22.016290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:03:22.016391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-29 02:03:22.016382551 +0000 UTC m=+629.804353915 I0429 02:03:22.258134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:03:22.298483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gcskw" condition "Approved" to 2026-04-29 02:03:22.298466159 +0000 UTC m=+630.086437553 I0429 02:03:22.323393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gcskw" condition "Ready" to 2026-04-29 02:03:22.323382507 +0000 UTC m=+630.111353871 I0429 02:03:22.348774 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 02:03:22.348764072 +0000 UTC m=+630.136735436 I0429 02:03:22.370825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:04:01.342612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 02:04:01.342635 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-29 02:04:01.342623584 +0000 UTC m=+669.130594948 I0429 02:04:01.342657 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-29 02:04:01.342646354 +0000 UTC m=+669.130617738 I0429 02:04:01.363841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:04:01.363903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0429 02:04:01.363919 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-29 02:04:01.363913075 +0000 UTC m=+669.151884439 I0429 02:04:01.615293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:04:01.619284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mlg9" condition "Approved" to 2026-04-29 02:04:01.619272835 +0000 UTC m=+669.407244199 I0429 02:04:01.635475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4mlg9" condition "Ready" to 2026-04-29 02:04:01.635463835 +0000 UTC m=+669.423435199 I0429 02:04:01.673537 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 02:04:01.673526734 +0000 UTC m=+669.461498088 I0429 02:04:01.688850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0429 02:04:01.689189 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-29 02:04:01.689183218 +0000 UTC m=+669.477154572 I0429 02:04:01.712275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"