I0414 12:01:35.202684 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 12:01:35.202783 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 12:01:35.202846 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 12:01:35.208942 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 12:01:35.209925 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 12:01:35.210026 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 12:01:35.210034 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 12:01:35.214075 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 12:01:35.225289 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 12:01:35.225623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 12:01:35.231408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 12:01:35.236612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 12:01:35.243347 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 12:01:35.243416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 12:01:35.243439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 12:01:35.245790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 12:01:35.247429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 12:01:35.249574 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 12:01:35.249632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 12:01:35.251483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 12:01:35.253213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 12:01:35.255280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 12:01:35.261822 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 12:01:35.261905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 12:01:35.266305 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 12:01:35.268057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 12:01:35.269857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 12:01:35.271687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 12:01:35.273570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 12:01:35.275471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 12:01:35.277246 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 12:01:35.277282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 12:01:35.282834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 12:01:35.286364 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.286366 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.287342 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.287836 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.314403 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.329977 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.341670 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.353571 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.367046 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:35.379159 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:01:56.578105 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 12:01:56.578065808 +0000 UTC m=+21.408247469 I0414 12:01:57.386405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:01:57.386491 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 12:01:57.386483291 +0000 UTC m=+22.216664942 I0414 12:01:57.386419 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 12:01:57.38640572 +0000 UTC m=+22.216587391 E0414 12:01:57.400876 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:01:57.400948 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 12:01:57.400939945 +0000 UTC m=+22.231121586 E0414 12:01:57.400970 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:01:57.403585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:01:57.403648 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 12:01:57.403641204 +0000 UTC m=+22.233822835 E0414 12:01:57.415341 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 12:01:57.415450 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:01:57.415499 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:01:57.415582 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 12:01:57.425279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:01:57.447540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gwrbv" condition "Approved" to 2026-04-14 12:01:57.447527803 +0000 UTC m=+22.277709454 I0414 12:01:57.462596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gwrbv" condition "Ready" to 2026-04-14 12:01:57.462580944 +0000 UTC m=+22.292762615 I0414 12:01:57.487733 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:01:57.487723013 +0000 UTC m=+22.317904654 I0414 12:01:57.507624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:01:57.555646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:02:02.415945 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:02:02.415928698 +0000 UTC m=+27.246110359 I0414 12:02:45.357625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 12:02:45.357572584 +0000 UTC m=+70.187754245 I0414 12:02:45.358078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:02:45.358110 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 12:02:45.358103798 +0000 UTC m=+70.188285459 I0414 12:02:45.414151 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 12:02:45.414139596 +0000 UTC m=+70.244321237 I0414 12:02:45.422445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:02:45.422614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:02:45.422658 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 12:02:45.422651565 +0000 UTC m=+70.252833216 I0414 12:02:46.267715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wh825" condition "Approved" to 2026-04-14 12:02:46.267698298 +0000 UTC m=+71.097879939 I0414 12:02:46.374621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wh825" condition "Ready" to 2026-04-14 12:02:46.374589651 +0000 UTC m=+71.204771292 I0414 12:02:46.419594 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:02:46.419582523 +0000 UTC m=+71.249764154 I0414 12:02:46.463212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:02:46.463935 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:02:46.46391966 +0000 UTC m=+71.294101331 I0414 12:02:46.610735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:02:46.611146 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:02:46.611137851 +0000 UTC m=+71.441319482 I0414 12:02:46.665434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:39.787465 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready" to 2026-04-14 12:09:39.787423913 +0000 UTC m=+484.617605584 I0414 12:09:39.787925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:39.787946 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-04-14 12:09:39.78794162 +0000 UTC m=+484.618123261 I0414 12:09:39.801458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:39.801522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:39.801541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-04-14 12:09:39.801534316 +0000 UTC m=+484.631715977 I0414 12:09:39.964235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-lsdtj" condition "Approved" to 2026-04-14 12:09:39.964227366 +0000 UTC m=+484.794408997 I0414 12:09:39.998337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-lsdtj" condition "Ready" to 2026-04-14 12:09:39.998300254 +0000 UTC m=+484.828481915 I0414 12:09:40.032005 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:40.031992585 +0000 UTC m=+484.862174226 I0414 12:09:40.054924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:40.056179 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:40.056155296 +0000 UTC m=+484.886336937 I0414 12:09:40.074133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:40.074477 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:40.074469227 +0000 UTC m=+484.904650868 I0414 12:10:47.186693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 12:10:47.186647099 +0000 UTC m=+552.016828770 I0414 12:10:47.186754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:10:47.186841 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 12:10:47.186831861 +0000 UTC m=+552.017013512 E0414 12:10:47.463337 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:10:47.463650 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 12:10:47.46363174 +0000 UTC m=+552.293813441 E0414 12:10:47.463805 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:10:47.465298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:10:47.465419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:10:47.465481 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 12:10:47.465472273 +0000 UTC m=+552.295653914 E0414 12:10:47.545906 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 12:10:47.546272 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:10:47.546479 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:10:47.547585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 12:10:47.756827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gc5rt" condition "Approved" to 2026-04-14 12:10:47.75681287 +0000 UTC m=+552.586994531 I0414 12:10:48.060456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gc5rt" condition "Ready" to 2026-04-14 12:10:48.060444846 +0000 UTC m=+552.890626487 I0414 12:10:48.547990 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:10:48.547979155 +0000 UTC m=+553.378160796 I0414 12:10:48.737117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:10:48.737904 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:10:48.73789406 +0000 UTC m=+553.568075721 I0414 12:10:48.772480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:10:52.546527 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:10:52.54651407 +0000 UTC m=+557.376695731 I0414 12:11:34.436579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.436643 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 12:11:34.436636512 +0000 UTC m=+599.266818153 I0414 12:11:34.438837 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 12:11:34.4388297 +0000 UTC m=+599.269011321 I0414 12:11:34.439038 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 12:11:34.439034183 +0000 UTC m=+599.269215824 I0414 12:11:34.439236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.439278 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 12:11:34.439274366 +0000 UTC m=+599.269455987 I0414 12:11:34.454893 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 12:11:34.454882732 +0000 UTC m=+599.285064363 I0414 12:11:34.455181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.455202 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 12:11:34.455199026 +0000 UTC m=+599.285380657 I0414 12:11:34.486636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.488807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.488871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.488894 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 12:11:34.488889 +0000 UTC m=+599.319070631 I0414 12:11:34.489192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.489209 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 12:11:34.489206575 +0000 UTC m=+599.319388206 I0414 12:11:34.497475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.497529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:34.499475 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 12:11:34.499467614 +0000 UTC m=+599.329649265 I0414 12:11:34.681693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.694385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kg6sd" condition "Approved" to 2026-04-14 12:11:34.694374697 +0000 UTC m=+599.524556348 I0414 12:11:34.726611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kg6sd" condition "Ready" to 2026-04-14 12:11:34.726599523 +0000 UTC m=+599.556781144 I0414 12:11:34.774987 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:34.774968862 +0000 UTC m=+599.605150493 I0414 12:11:34.811620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7jms9" condition "Approved" to 2026-04-14 12:11:34.811610584 +0000 UTC m=+599.641792215 I0414 12:11:34.821429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.840083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7jms9" condition "Ready" to 2026-04-14 12:11:34.840066452 +0000 UTC m=+599.670248073 I0414 12:11:34.881588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:34.883019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n8sv8" condition "Approved" to 2026-04-14 12:11:34.883008602 +0000 UTC m=+599.713190243 I0414 12:11:34.897342 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:34.897333813 +0000 UTC m=+599.727515444 I0414 12:11:34.926196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n8sv8" condition "Ready" to 2026-04-14 12:11:34.926188197 +0000 UTC m=+599.756369828 I0414 12:11:35.372493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:35.372953 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:35.372942417 +0000 UTC m=+600.203124058 E0414 12:11:35.676944 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-gjf8g\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0414 12:11:35.827005 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:35.82697577 +0000 UTC m=+600.657157411 I0414 12:11:35.870467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:36.115950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:36.116241 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:36.116233449 +0000 UTC m=+600.946415080 I0414 12:11:36.219539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:36.266763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:45.091360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:45.091369 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" condition "Ready" to 2026-04-14 12:11:45.091343656 +0000 UTC m=+609.921525317 I0414 12:11:45.091420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" condition "Issuing" to 2026-04-14 12:11:45.091404657 +0000 UTC m=+609.921586318 I0414 12:11:45.235758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:45.235843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:45.235866 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" condition "Issuing" to 2026-04-14 12:11:45.235859976 +0000 UTC m=+610.066041617 I0414 12:11:46.273996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s7vrh-mwwwg" condition "Approved" to 2026-04-14 12:11:46.273985317 +0000 UTC m=+611.104166958 I0414 12:11:46.957833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s7vrh-mwwwg" condition "Ready" to 2026-04-14 12:11:46.95782271 +0000 UTC m=+611.788004351 I0414 12:11:47.012902 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:47.012885799 +0000 UTC m=+611.843067450 I0414 12:11:47.030354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:47.030728 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:47.030717492 +0000 UTC m=+611.860899143 I0414 12:11:47.050530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s7vrh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:12:29.182127 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 12:12:29.182106848 +0000 UTC m=+654.012288479 I0414 12:12:29.182401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:12:29.182442 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 12:12:29.182433851 +0000 UTC m=+654.012615492 I0414 12:12:29.209668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:12:29.209748 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 12:12:29.209740908 +0000 UTC m=+654.039922549 I0414 12:12:29.363130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:12:29.465297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jhmf5" condition "Approved" to 2026-04-14 12:12:29.465282908 +0000 UTC m=+654.295464549 I0414 12:12:29.685967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jhmf5" condition "Ready" to 2026-04-14 12:12:29.685955581 +0000 UTC m=+654.516137222 I0414 12:12:29.946698 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:12:29.946653956 +0000 UTC m=+654.776835627 I0414 12:12:29.975403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:12:29.975703 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:12:29.975695073 +0000 UTC m=+654.805876714 I0414 12:12:30.009490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:12:30.061823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:15:56.644120 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 12:15:56.644073814 +0000 UTC m=+861.474255455 I0414 12:15:56.644215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:15:56.644279 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 12:15:56.644272639 +0000 UTC m=+861.474454290 I0414 12:15:56.663235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:15:56.663312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:15:56.663335 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 12:15:56.663328625 +0000 UTC m=+861.493510266 I0414 12:15:56.962460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tnn8j" condition "Approved" to 2026-04-14 12:15:56.962450816 +0000 UTC m=+861.792632457 I0414 12:15:56.987980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tnn8j" condition "Ready" to 2026-04-14 12:15:56.987970931 +0000 UTC m=+861.818152552 I0414 12:15:57.108542 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:15:57.108529953 +0000 UTC m=+861.938711584 I0414 12:15:57.133208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:03.316014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:17:03.316044 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 12:17:03.316036205 +0000 UTC m=+928.146217836 I0414 12:17:03.316540 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 12:17:03.316515256 +0000 UTC m=+928.146696927 I0414 12:17:03.388749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:03.388817 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 12:17:03.388809453 +0000 UTC m=+928.218991094 I0414 12:17:03.727911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:03.807894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h2r4m" condition "Approved" to 2026-04-14 12:17:03.807875428 +0000 UTC m=+928.638057129 I0414 12:17:03.838019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h2r4m" condition "Ready" to 2026-04-14 12:17:03.838009876 +0000 UTC m=+928.668191507 I0414 12:17:03.879859 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:03.879847738 +0000 UTC m=+928.710029369 I0414 12:17:03.899580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:03.900227 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:03.900216885 +0000 UTC m=+928.730398526 I0414 12:17:03.936086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:03.936535 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:03.936526518 +0000 UTC m=+928.766708159