I0427 16:01:49.753886 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 16:01:49.754043 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 16:01:49.754169 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 16:01:49.757575 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 16:01:49.758043 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 16:01:49.758110 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 16:01:49.758110 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 16:01:49.760806 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 16:01:49.776867 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 16:01:49.783224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 16:01:49.787788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 16:01:49.789831 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 16:01:49.789855 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 16:01:49.789898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 16:01:49.791738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 16:01:49.793651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 16:01:49.795262 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 16:01:49.795479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 16:01:49.797182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 16:01:49.802800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 16:01:49.804738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 16:01:49.806659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 16:01:49.809274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 16:01:49.811738 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 16:01:49.811766 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 16:01:49.811894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 16:01:49.814429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 16:01:49.817243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 16:01:49.819471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 16:01:49.821297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 16:01:49.828284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 16:01:49.831558 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 16:01:49.832145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 16:01:49.835673 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.835796 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.835936 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.851259 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.869039 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.886665 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.894868 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.915441 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.922849 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:49.930648 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:08.212887 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 16:02:08.212873904 +0000 UTC m=+18.491995152 I0427 16:02:08.899787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:08.899860 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:02:08.899848719 +0000 UTC m=+19.178969987 I0427 16:02:08.900078 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:02:08.900065781 +0000 UTC m=+19.179187029 E0427 16:02:08.917019 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:02:08.917063 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 16:02:08.917057626 +0000 UTC m=+19.196178864 E0427 16:02:08.917082 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:02:08.920098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:08.920182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:08.920207 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:02:08.920199772 +0000 UTC m=+19.199321020 E0427 16:02:08.929119 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 16:02:08.929395 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:02:08.929494 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:02:08.929572 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 16:02:08.968848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hl2wg" condition "Approved" to 2026-04-27 16:02:08.968835128 +0000 UTC m=+19.247956376 I0427 16:02:08.983644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hl2wg" condition "Ready" to 2026-04-27 16:02:08.983629058 +0000 UTC m=+19.262750336 I0427 16:02:09.003536 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:09.003522474 +0000 UTC m=+19.282643722 I0427 16:02:09.027162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:09.027549 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:09.027540033 +0000 UTC m=+19.306661301 I0427 16:02:09.035191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:09.043389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:09.044760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:09.045080 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:09.045072179 +0000 UTC m=+19.324193417 I0427 16:02:13.929604 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:13.929591078 +0000 UTC m=+24.208712346 I0427 16:02:33.565466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:33.565507 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:02:33.565499116 +0000 UTC m=+43.844620354 I0427 16:02:33.565574 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 16:02:33.565558714 +0000 UTC m=+43.844679952 I0427 16:02:33.579512 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 16:02:33.579497523 +0000 UTC m=+43.858618801 I0427 16:02:33.591986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:33.592060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:33.592088 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:02:33.592081967 +0000 UTC m=+43.871203215 I0427 16:02:33.930372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ng48h" condition "Approved" to 2026-04-27 16:02:33.930361238 +0000 UTC m=+44.209482486 I0427 16:02:33.963798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ng48h" condition "Ready" to 2026-04-27 16:02:33.963786512 +0000 UTC m=+44.242907770 I0427 16:02:33.993620 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:33.993603424 +0000 UTC m=+44.272724671 I0427 16:02:34.014750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:34.015050 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:34.015041993 +0000 UTC m=+44.294163231 I0427 16:02:34.026588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:34.038885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:56.570861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-11.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:06:56.571140 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready" to 2026-04-27 16:06:56.571132641 +0000 UTC m=+306.850253889 I0427 16:06:56.570905 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Issuing" to 2026-04-27 16:06:56.570894937 +0000 UTC m=+306.850016195 I0427 16:06:56.588670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:56.588774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready" to 2026-04-27 16:06:56.588765052 +0000 UTC m=+306.867886290 I0427 16:06:56.683654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:56.726752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-11.nip.io-tls-ctxd5" condition "Approved" to 2026-04-27 16:06:56.726741508 +0000 UTC m=+307.005862756 I0427 16:06:56.805051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-11.nip.io-tls-ctxd5" condition "Ready" to 2026-04-27 16:06:56.805039412 +0000 UTC m=+307.084160660 I0427 16:06:56.832744 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:06:56.832733197 +0000 UTC m=+307.111854445 I0427 16:06:56.851647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:56.900595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:01.092574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:01.092792 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 16:08:01.09277985 +0000 UTC m=+371.371901098 I0427 16:08:01.092906 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:08:01.092880798 +0000 UTC m=+371.372002046 E0427 16:08:01.106853 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:08:01.106907 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 16:08:01.106894437 +0000 UTC m=+371.386015685 E0427 16:08:01.106970 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:08:01.110689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:01.110807 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:08:01.110795948 +0000 UTC m=+371.389917196 E0427 16:08:01.119439 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 16:08:01.119678 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:08:01.119781 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:08:01.120636 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 16:08:01.131736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:01.157442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mwl74" condition "Approved" to 2026-04-27 16:08:01.157426016 +0000 UTC m=+371.436547264 I0427 16:08:01.173393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mwl74" condition "Ready" to 2026-04-27 16:08:01.173382305 +0000 UTC m=+371.452503553 I0427 16:08:01.204320 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:01.204301335 +0000 UTC m=+371.483422573 I0427 16:08:01.226435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:06.120388 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:06.120374638 +0000 UTC m=+376.399495916 I0427 16:08:48.345987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:48.346039 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:08:48.346034085 +0000 UTC m=+418.625155323 I0427 16:08:48.346521 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:08:48.346516928 +0000 UTC m=+418.625638166 I0427 16:08:48.354883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:48.354901 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:08:48.354897989 +0000 UTC m=+418.634019227 I0427 16:08:48.356230 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 16:08:48.356215118 +0000 UTC m=+418.635336356 I0427 16:08:48.356645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:48.356641 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:08:48.356636407 +0000 UTC m=+418.635757645 I0427 16:08:48.356665 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 16:08:48.356662078 +0000 UTC m=+418.635783316 I0427 16:08:48.401241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.401295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:48.401312 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:08:48.401306449 +0000 UTC m=+418.680427677 I0427 16:08:48.403464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.403664 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:08:48.403656546 +0000 UTC m=+418.682777784 I0427 16:08:48.404462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.404614 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 16:08:48.404610399 +0000 UTC m=+418.683731647 I0427 16:08:48.574580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.598104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.599187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4ntrl" condition "Approved" to 2026-04-27 16:08:48.599175929 +0000 UTC m=+418.878297177 I0427 16:08:48.605633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rzctj" condition "Approved" to 2026-04-27 16:08:48.605620873 +0000 UTC m=+418.884742111 I0427 16:08:48.623767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4ntrl" condition "Ready" to 2026-04-27 16:08:48.623753757 +0000 UTC m=+418.902875025 I0427 16:08:48.624084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rzctj" condition "Ready" to 2026-04-27 16:08:48.624074212 +0000 UTC m=+418.903195450 I0427 16:08:48.696665 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:48.696653164 +0000 UTC m=+418.975774402 I0427 16:08:48.696965 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:48.696961627 +0000 UTC m=+418.976082865 I0427 16:08:48.769279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:48.821062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:49.025839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:49.172127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r292t" condition "Approved" to 2026-04-27 16:08:49.172112073 +0000 UTC m=+419.451233311 I0427 16:08:49.239650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r292t" condition "Ready" to 2026-04-27 16:08:49.239634954 +0000 UTC m=+419.518756192 I0427 16:08:49.722709 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:49.722684159 +0000 UTC m=+420.001805427 I0427 16:08:49.819434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:49.820169 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:49.82015802 +0000 UTC m=+420.099279278 I0427 16:08:50.018463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:50.121234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:59.019501 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" condition "Ready" to 2026-04-27 16:08:59.019486966 +0000 UTC m=+429.298608204 I0427 16:08:59.019668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:59.019765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" condition "Issuing" to 2026-04-27 16:08:59.019749166 +0000 UTC m=+429.298870484 I0427 16:08:59.037737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:59.037879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:59.037910 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" condition "Issuing" to 2026-04-27 16:08:59.03790158 +0000 UTC m=+429.317022828 I0427 16:08:59.364768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ptnmx-ms55d" condition "Approved" to 2026-04-27 16:08:59.364755984 +0000 UTC m=+429.643877222 I0427 16:08:59.544751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ptnmx-ms55d" condition "Ready" to 2026-04-27 16:08:59.544724377 +0000 UTC m=+429.823845645 I0427 16:08:59.622853 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:59.622835883 +0000 UTC m=+429.901957121 I0427 16:08:59.661650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:59.882391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ptnmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:12.236017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:12.236054 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 16:09:12.236046323 +0000 UTC m=+442.515167571 I0427 16:09:12.236468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:12.236443527 +0000 UTC m=+442.515564775 I0427 16:09:12.251497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:12.251568 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:12.251557128 +0000 UTC m=+442.530678376 I0427 16:09:12.442023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:12.483418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rw9h5" condition "Approved" to 2026-04-27 16:09:12.483391306 +0000 UTC m=+442.762512574 I0427 16:09:12.508554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rw9h5" condition "Ready" to 2026-04-27 16:09:12.508543883 +0000 UTC m=+442.787665121 I0427 16:09:12.546322 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:12.546292989 +0000 UTC m=+442.825414267 I0427 16:09:12.570730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:12.571431 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:12.571376533 +0000 UTC m=+442.850497781 I0427 16:09:12.601916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:31.158550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:31.158609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:31.158603434 +0000 UTC m=+641.437724682 I0427 16:12:31.159144 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 16:12:31.159138879 +0000 UTC m=+641.438260127 I0427 16:12:31.174840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:31.174886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:31.174900 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:31.174895619 +0000 UTC m=+641.454016867 I0427 16:12:31.382042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:31.390673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wgf5h" condition "Approved" to 2026-04-27 16:12:31.390664573 +0000 UTC m=+641.669785811 I0427 16:12:31.408300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wgf5h" condition "Ready" to 2026-04-27 16:12:31.408288879 +0000 UTC m=+641.687410127 I0427 16:12:31.441994 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:31.441981731 +0000 UTC m=+641.721102969 I0427 16:12:31.468095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:31.468582 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:31.468574141 +0000 UTC m=+641.747695389 I0427 16:12:31.480968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:31.481459 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:31.481451456 +0000 UTC m=+641.760572704 I0427 16:12:31.481959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:11.421640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:13:11.421693 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 16:13:11.421682782 +0000 UTC m=+681.700804050 I0427 16:13:11.421724 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:13:11.421712931 +0000 UTC m=+681.700834179 I0427 16:13:11.439736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:11.439820 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:13:11.43980842 +0000 UTC m=+681.718929688 I0427 16:13:11.752859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:11.787578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sxpct" condition "Approved" to 2026-04-27 16:13:11.787565801 +0000 UTC m=+682.066687029 I0427 16:13:11.811124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sxpct" condition "Ready" to 2026-04-27 16:13:11.811116278 +0000 UTC m=+682.090237516 I0427 16:13:11.850109 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:11.850094386 +0000 UTC m=+682.129215624 I0427 16:13:11.877459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:11.878015 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:11.878003852 +0000 UTC m=+682.157125100 I0427 16:13:11.893439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:11.903647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"