I0428 22:20:33.117319 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 22:20:33.118560 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 22:20:33.119437 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 22:20:33.123579 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 22:20:33.124146 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 22:20:33.124338 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 22:20:33.124355 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 22:20:33.126990 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 22:20:33.139723 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 22:20:33.140110 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 22:20:33.146019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 22:20:33.152564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 22:20:33.154681 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 22:20:33.154767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 22:20:33.156697 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 22:20:33.158618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 22:20:33.160418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 22:20:33.162368 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 22:20:33.162385 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 22:20:33.162392 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 22:20:33.162470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 22:20:33.164248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 22:20:33.170807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 22:20:33.173457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 22:20:33.175785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 22:20:33.177519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 22:20:33.179570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 22:20:33.181526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 22:20:33.183503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 22:20:33.185471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 22:20:33.191425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 22:20:33.194678 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 22:20:33.195254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 22:20:33.201901 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.202141 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.202367 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.204083 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.215575 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.229759 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.245487 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.264925 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.280129 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:33.280473 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:48.275035 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 22:20:48.275016705 +0000 UTC m=+15.192462316 I0428 22:20:49.031632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:20:49.031705 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 22:20:49.031672056 +0000 UTC m=+15.949117667 I0428 22:20:49.033765 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:20:49.033738199 +0000 UTC m=+15.951183810 E0428 22:20:49.051493 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:20:49.051581 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 22:20:49.051572551 +0000 UTC m=+15.969018142 E0428 22:20:49.051723 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:20:49.054362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:49.054424 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:20:49.054417777 +0000 UTC m=+15.971863358 E0428 22:20:49.066896 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 22:20:49.070328 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:20:49.070439 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:20:49.070494 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 22:20:49.073450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:49.073676 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:20:49.073663326 +0000 UTC m=+15.991108937 I0428 22:20:49.082193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ww9sf" condition "Approved" to 2026-04-28 22:20:49.082180035 +0000 UTC m=+15.999625626 I0428 22:20:49.097399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ww9sf" condition "Ready" to 2026-04-28 22:20:49.097340889 +0000 UTC m=+16.014786470 I0428 22:20:49.121142 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:49.12112368 +0000 UTC m=+16.038569291 I0428 22:20:49.142552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:49.142987 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:49.142979138 +0000 UTC m=+16.060424719 I0428 22:20:49.159235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:49.159634 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:49.159627919 +0000 UTC m=+16.077073510 I0428 22:20:54.068455 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:54.068434052 +0000 UTC m=+20.985879663 I0428 22:21:16.208222 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 22:21:16.208206412 +0000 UTC m=+43.125651983 I0428 22:21:16.208601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:21:16.208621 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:21:16.208618589 +0000 UTC m=+43.126064170 I0428 22:21:16.223809 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 22:21:16.223796811 +0000 UTC m=+43.141242392 I0428 22:21:16.237744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:21:16.237815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:21:16.237836 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:21:16.237831514 +0000 UTC m=+43.155277095 I0428 22:21:16.461906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6rb95" condition "Approved" to 2026-04-28 22:21:16.461891727 +0000 UTC m=+43.379337318 I0428 22:21:16.491141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6rb95" condition "Ready" to 2026-04-28 22:21:16.491127763 +0000 UTC m=+43.408573354 I0428 22:21:16.526384 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:21:16.526369962 +0000 UTC m=+43.443815603 I0428 22:21:16.559794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:21:16.560151 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:21:16.560137865 +0000 UTC m=+43.477583456 I0428 22:21:16.560772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:21:16.578522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:21:16.578808 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:21:16.578799268 +0000 UTC m=+43.496244869 I0428 22:25:23.173380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:25:23.173440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-28 22:25:23.173407034 +0000 UTC m=+290.090852615 I0428 22:25:23.173465 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-28 22:25:23.173441874 +0000 UTC m=+290.090887465 I0428 22:25:23.195104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:23.195184 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-28 22:25:23.195176396 +0000 UTC m=+290.112622007 I0428 22:25:23.302619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:23.332653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-vlvg6" condition "Approved" to 2026-04-28 22:25:23.332637931 +0000 UTC m=+290.250083542 I0428 22:25:23.358610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-vlvg6" condition "Ready" to 2026-04-28 22:25:23.358601271 +0000 UTC m=+290.276046862 I0428 22:25:23.381507 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:25:23.381493167 +0000 UTC m=+290.298938778 I0428 22:25:23.400645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:23.439572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:26.319015 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 22:26:26.318995088 +0000 UTC m=+353.236440689 I0428 22:26:26.319614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:26:26.319673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:26:26.319662641 +0000 UTC m=+353.237108262 E0428 22:26:26.335221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:26:26.335282 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 22:26:26.335273571 +0000 UTC m=+353.252719162 E0428 22:26:26.335798 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:26:26.337047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:26.337137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:26:26.337173 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:26:26.337164816 +0000 UTC m=+353.254610427 E0428 22:26:26.345662 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 22:26:26.345900 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:26:26.347661 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:26:26.347828 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 22:26:26.370659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:26.375200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrdz2" condition "Approved" to 2026-04-28 22:26:26.375177921 +0000 UTC m=+353.292623512 I0428 22:26:26.387977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrdz2" condition "Ready" to 2026-04-28 22:26:26.387963879 +0000 UTC m=+353.305409470 I0428 22:26:26.409192 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:26:26.409177972 +0000 UTC m=+353.326623563 I0428 22:26:26.425877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:26.480629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:31.347349 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:26:31.347327258 +0000 UTC m=+358.264772869 I0428 22:27:14.223882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:14.223947 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:27:14.223916769 +0000 UTC m=+401.141362360 I0428 22:27:14.224221 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:27:14.224203988 +0000 UTC m=+401.141649559 I0428 22:27:14.238732 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:27:14.238721125 +0000 UTC m=+401.156166706 I0428 22:27:14.239431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:14.239477 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:27:14.239465857 +0000 UTC m=+401.156911438 I0428 22:27:14.271344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:14.273153 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:27:14.273138761 +0000 UTC m=+401.190584342 I0428 22:27:14.271391 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:27:14.271354907 +0000 UTC m=+401.188800488 I0428 22:27:14.317745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.317848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:14.317881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:27:14.317872628 +0000 UTC m=+401.235318209 I0428 22:27:14.369175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.369304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:14.369336 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:27:14.369327657 +0000 UTC m=+401.286773248 I0428 22:27:14.386854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.388386 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:27:14.388375592 +0000 UTC m=+401.305821183 I0428 22:27:14.509889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.545276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mq8cv" condition "Approved" to 2026-04-28 22:27:14.545259156 +0000 UTC m=+401.462704747 I0428 22:27:14.572396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mq8cv" condition "Ready" to 2026-04-28 22:27:14.572381074 +0000 UTC m=+401.489826665 I0428 22:27:14.624844 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:14.624834663 +0000 UTC m=+401.542280254 I0428 22:27:14.647045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.668724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zb2tr" condition "Approved" to 2026-04-28 22:27:14.668696554 +0000 UTC m=+401.586142175 I0428 22:27:14.693639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zb2tr" condition "Ready" to 2026-04-28 22:27:14.693628955 +0000 UTC m=+401.611074536 I0428 22:27:14.749119 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:14.749103136 +0000 UTC m=+401.666548717 I0428 22:27:14.763942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kj6k2" condition "Approved" to 2026-04-28 22:27:14.763921212 +0000 UTC m=+401.681366823 I0428 22:27:14.795634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:14.795979 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:14.795970618 +0000 UTC m=+401.713416209 I0428 22:27:14.899049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kj6k2" condition "Ready" to 2026-04-28 22:27:14.899033252 +0000 UTC m=+401.816478843 I0428 22:27:15.532738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:15.585779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:15.633407 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:15.633388152 +0000 UTC m=+402.550833763 I0428 22:27:15.788283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:21.893625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" condition "Ready" to 2026-04-28 22:27:21.893602921 +0000 UTC m=+408.811048512 I0428 22:27:21.893741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:21.893773 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" condition "Issuing" to 2026-04-28 22:27:21.893764686 +0000 UTC m=+408.811210277 I0428 22:27:21.910581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:21.910622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:21.910646 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" condition "Issuing" to 2026-04-28 22:27:21.910642467 +0000 UTC m=+408.828088048 I0428 22:27:22.121112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8bzx5-45rgt" condition "Approved" to 2026-04-28 22:27:22.121097702 +0000 UTC m=+409.038543273 I0428 22:27:22.226360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8bzx5-45rgt" condition "Ready" to 2026-04-28 22:27:22.226350444 +0000 UTC m=+409.143796025 I0428 22:27:22.264180 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:22.264166771 +0000 UTC m=+409.181612362 I0428 22:27:22.288385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8bzx5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:33.645322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:27:33.645408 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 22:27:33.645390034 +0000 UTC m=+420.562835635 I0428 22:27:33.645925 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:27:33.645916143 +0000 UTC m=+420.563361764 I0428 22:27:33.671859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:33.671998 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:27:33.671986339 +0000 UTC m=+420.589431920 I0428 22:27:33.893985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:33.935725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z9g6c" condition "Approved" to 2026-04-28 22:27:33.935713475 +0000 UTC m=+420.853159056 I0428 22:27:33.961099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z9g6c" condition "Ready" to 2026-04-28 22:27:33.961089637 +0000 UTC m=+420.878535218 I0428 22:27:34.006863 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:34.006837235 +0000 UTC m=+420.924282836 I0428 22:27:34.038134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:27:34.038427 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:27:34.038422803 +0000 UTC m=+420.955868384 I0428 22:27:34.061682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:47.955761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:30:47.955819 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:30:47.955809239 +0000 UTC m=+614.873254850 I0428 22:30:47.956366 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 22:30:47.956357428 +0000 UTC m=+614.873803039 I0428 22:30:47.974576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:47.974616 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 22:30:47.974612762 +0000 UTC m=+614.892058333 I0428 22:30:48.086522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:48.113701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bmx8x" condition "Approved" to 2026-04-28 22:30:48.11368994 +0000 UTC m=+615.031135531 I0428 22:30:48.141858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bmx8x" condition "Ready" to 2026-04-28 22:30:48.141835226 +0000 UTC m=+615.059280837 I0428 22:30:48.168744 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:30:48.168732878 +0000 UTC m=+615.086178479 I0428 22:30:48.198411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:48.200643 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:30:48.200635876 +0000 UTC m=+615.118081457 I0428 22:30:48.215139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:48.215524 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:30:48.21551491 +0000 UTC m=+615.132960501 I0428 22:31:29.228673 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 22:31:29.228661126 +0000 UTC m=+656.146106707 I0428 22:31:29.229395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:31:29.229621 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 22:31:29.229612435 +0000 UTC m=+656.147058016 I0428 22:31:29.251647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:29.251894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:31:29.252008 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 22:31:29.251999439 +0000 UTC m=+656.169445020 I0428 22:31:29.547765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vbq5g" condition "Approved" to 2026-04-28 22:31:29.547754441 +0000 UTC m=+656.465200022 I0428 22:31:29.572462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vbq5g" condition "Ready" to 2026-04-28 22:31:29.572451205 +0000 UTC m=+656.489896786 I0428 22:31:29.603019 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:29.603001623 +0000 UTC m=+656.520447214 I0428 22:31:29.626423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:29.626852 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:29.626843782 +0000 UTC m=+656.544289353 I0428 22:31:29.650063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:29.651310 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:29.651296643 +0000 UTC m=+656.568742264