I0411 17:43:52.348019 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0411 17:43:52.348305 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0411 17:43:52.348641 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 17:43:52.355672 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0411 17:43:52.356276 1 controller.go:156] "cert-manager/controller: starting leader election" I0411 17:43:52.356351 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0411 17:43:52.356416 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0411 17:43:52.359342 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 17:43:52.374432 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0411 17:43:52.374553 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0411 17:43:52.378771 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0411 17:43:52.381642 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0411 17:43:52.387861 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0411 17:43:52.390811 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0411 17:43:52.393988 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0411 17:43:52.395618 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0411 17:43:52.397799 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0411 17:43:52.399597 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0411 17:43:52.399781 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0411 17:43:52.401654 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0411 17:43:52.406163 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0411 17:43:52.410085 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0411 17:43:52.413835 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0411 17:43:52.413877 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0411 17:43:52.417047 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0411 17:43:52.418891 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0411 17:43:52.420470 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0411 17:43:52.420487 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0411 17:43:52.420495 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0411 17:43:52.420556 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0411 17:43:52.422540 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0411 17:43:52.424587 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0411 17:43:52.426588 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0411 17:44:03.408858 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 17:44:03.408827411 +0000 UTC m=+11.089751546 I0411 17:44:04.155237 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:44:04.155220853 +0000 UTC m=+11.836144998 I0411 17:44:04.155714 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:44:04.155810 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:44:04.15579786 +0000 UTC m=+11.836721995 E0411 17:44:04.168859 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:44:04.168919 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 17:44:04.168912287 +0000 UTC m=+11.849836392 E0411 17:44:04.168981 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:44:04.172916 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:04.173057 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:44:04.173089 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:44:04.173079878 +0000 UTC m=+11.854003993 E0411 17:44:04.178944 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0411 17:44:04.179291 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:44:04.179369 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:44:04.179437 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0411 17:44:04.218066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4g7lx" condition "Approved" to 2026-04-11 17:44:04.218045395 +0000 UTC m=+11.898969500 I0411 17:44:04.219608 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:04.231522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4g7lx" condition "Ready" to 2026-04-11 17:44:04.231501987 +0000 UTC m=+11.912426122 I0411 17:44:04.251858 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:04.251851608 +0000 UTC m=+11.932775723 I0411 17:44:04.267373 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:04.267648 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:04.267641477 +0000 UTC m=+11.948565592 I0411 17:44:04.288677 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:09.180813 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:09.180333174 +0000 UTC m=+16.861257309 I0411 17:44:30.361613 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:44:30.361521099 +0000 UTC m=+38.042445214 I0411 17:44:30.364436 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:44:30.366436 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:44:30.366419856 +0000 UTC m=+38.047344051 I0411 17:44:30.377506 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 17:44:30.377497964 +0000 UTC m=+38.058422069 I0411 17:44:30.390780 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:30.390896 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:44:30.390919 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:44:30.390912218 +0000 UTC m=+38.071836333 I0411 17:44:30.591449 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:30.598162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4kjpt" condition "Approved" to 2026-04-11 17:44:30.598145826 +0000 UTC m=+38.279069931 I0411 17:44:30.633727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4kjpt" condition "Ready" to 2026-04-11 17:44:30.633703069 +0000 UTC m=+38.314627204 I0411 17:44:30.665024 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:30.665008708 +0000 UTC m=+38.345932853 I0411 17:44:30.690472 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:30.691319 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:30.691312236 +0000 UTC m=+38.372236361 I0411 17:44:30.710892 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:30.714914 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:44:30.715390 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:44:30.715382072 +0000 UTC m=+38.396306167 I0411 17:47:06.928358 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-200.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:47:06.928432 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Issuing" to 2026-04-11 17:47:06.92838342 +0000 UTC m=+194.609307535 I0411 17:47:06.929133 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready" to 2026-04-11 17:47:06.929127475 +0000 UTC m=+194.610051590 I0411 17:47:06.945270 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:47:06.945630 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready" to 2026-04-11 17:47:06.945579671 +0000 UTC m=+194.626503816 I0411 17:47:07.305725 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:47:07.340146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-200.nip.io-tls-pjb74" condition "Approved" to 2026-04-11 17:47:07.340128144 +0000 UTC m=+195.021052259 I0411 17:47:07.362751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-200.nip.io-tls-pjb74" condition "Ready" to 2026-04-11 17:47:07.362738211 +0000 UTC m=+195.043662326 I0411 17:47:07.394517 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:47:07.394507838 +0000 UTC m=+195.075431943 I0411 17:47:07.419873 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.100512 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:03.100472953 +0000 UTC m=+250.781397068 I0411 17:48:03.100796 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:03.100815 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:48:03.100810985 +0000 UTC m=+250.781735100 E0411 17:48:03.114120 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:03.114161 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 17:48:03.114151549 +0000 UTC m=+250.795075684 E0411 17:48:03.114219 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:03.120597 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.120728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:03.120715042 +0000 UTC m=+250.801639187 E0411 17:48:03.127232 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0411 17:48:03.127388 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:03.127447 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:03.127508 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0411 17:48:03.142193 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.165577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hs987" condition "Approved" to 2026-04-11 17:48:03.165562279 +0000 UTC m=+250.846486394 I0411 17:48:03.179024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hs987" condition "Ready" to 2026-04-11 17:48:03.17900868 +0000 UTC m=+250.859932795 I0411 17:48:03.197158 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:03.197140742 +0000 UTC m=+250.878064877 I0411 17:48:03.216441 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.216922 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:03.216911454 +0000 UTC m=+250.897835559 I0411 17:48:03.236318 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.236590 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:08.128006 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:08.127987249 +0000 UTC m=+255.808911394 I0411 17:48:46.934378 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:48:46.93435772 +0000 UTC m=+294.615281825 I0411 17:48:46.937958 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:48:46.937952153 +0000 UTC m=+294.618876248 I0411 17:48:46.938542 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.938747 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.938852 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:48:46.938842528 +0000 UTC m=+294.619766643 I0411 17:48:46.944752 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.944803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:48:46.944797313 +0000 UTC m=+294.625721418 I0411 17:48:46.945098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:48:46.945087555 +0000 UTC m=+294.626011660 I0411 17:48:46.950704 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:48:46.938600259 +0000 UTC m=+294.619524374 I0411 17:48:46.987367 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:46.987577 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.990754 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:48:46.990742402 +0000 UTC m=+294.671666517 I0411 17:48:46.987725 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:46.987501 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:46.990941 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.990967 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:48:46.990962363 +0000 UTC m=+294.671886458 I0411 17:48:46.991254 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:46.991305 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:48:46.991300158 +0000 UTC m=+294.672224273 I0411 17:48:47.172072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qfhcm" condition "Approved" to 2026-04-11 17:48:47.172053959 +0000 UTC m=+294.852978074 I0411 17:48:47.196091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qfhcm" condition "Ready" to 2026-04-11 17:48:47.196077158 +0000 UTC m=+294.877001273 I0411 17:48:47.263084 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:47.263071298 +0000 UTC m=+294.943995413 I0411 17:48:47.316120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n9kt7" condition "Approved" to 2026-04-11 17:48:47.316110165 +0000 UTC m=+294.997034260 I0411 17:48:47.363801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n9kt7" condition "Ready" to 2026-04-11 17:48:47.363644311 +0000 UTC m=+295.044568416 I0411 17:48:47.368522 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:47.368900 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:47.368894947 +0000 UTC m=+295.049819052 I0411 17:48:47.372141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tw7rb" condition "Approved" to 2026-04-11 17:48:47.372133925 +0000 UTC m=+295.053058030 I0411 17:48:47.389271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tw7rb" condition "Ready" to 2026-04-11 17:48:47.389264122 +0000 UTC m=+295.070188237 I0411 17:48:47.399585 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:47.400751 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:47.400738807 +0000 UTC m=+295.081662942 I0411 17:48:47.776668 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:47.776654709 +0000 UTC m=+295.457578854 E0411 17:48:47.878960 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"prometheus-tls-qh9hw\" already exists" key="monitoring/prometheus-tls" I0411 17:48:47.978642 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:47.978630589 +0000 UTC m=+295.659554704 I0411 17:48:48.102810 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:48.104052 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:48.104038343 +0000 UTC m=+295.784962488 I0411 17:48:48.181248 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:48.181807 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:48.181799184 +0000 UTC m=+295.862723299 I0411 17:48:48.579088 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:48.677576 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:48.726150 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:48.773175 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.350365 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" condition "Ready" to 2026-04-11 17:48:55.350348556 +0000 UTC m=+303.031272671 I0411 17:48:55.350424 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:55.350452 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" condition "Issuing" to 2026-04-11 17:48:55.350445733 +0000 UTC m=+303.031369838 I0411 17:48:55.366223 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.366291 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:55.366307 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" condition "Issuing" to 2026-04-11 17:48:55.366300688 +0000 UTC m=+303.047224803 I0411 17:48:56.156552 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:56.181112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wvmw6-97f5v" condition "Approved" to 2026-04-11 17:48:56.181096874 +0000 UTC m=+303.862020979 I0411 17:48:56.308709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wvmw6-97f5v" condition "Ready" to 2026-04-11 17:48:56.308695009 +0000 UTC m=+303.989619114 I0411 17:48:56.346812 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:56.346799597 +0000 UTC m=+304.027723702 I0411 17:48:56.361677 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:56.362231 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:56.362224984 +0000 UTC m=+304.043149099 I0411 17:48:56.384651 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:09.425563 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:49:09.425544857 +0000 UTC m=+317.106468962 I0411 17:49:09.425905 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:09.425918 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:49:09.425915547 +0000 UTC m=+317.106839652 I0411 17:49:09.443617 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:09.447469 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:49:09.447453766 +0000 UTC m=+317.128377881 I0411 17:49:09.713562 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:09.756447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-824jc" condition "Approved" to 2026-04-11 17:49:09.756433106 +0000 UTC m=+317.437357251 I0411 17:49:09.774537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-824jc" condition "Ready" to 2026-04-11 17:49:09.774523316 +0000 UTC m=+317.455447431 I0411 17:49:09.802688 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:09.802671123 +0000 UTC m=+317.483595258 I0411 17:49:09.821540 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:17.650823 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 17:52:17.650785429 +0000 UTC m=+505.331709534 I0411 17:52:17.651147 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:52:17.651179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:52:17.6511734 +0000 UTC m=+505.332097505 I0411 17:52:17.683189 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:17.683256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 17:52:17.683246518 +0000 UTC m=+505.364170653 I0411 17:52:18.085603 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:18.113844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8m8x8" condition "Approved" to 2026-04-11 17:52:18.113831555 +0000 UTC m=+505.794755650 I0411 17:52:18.131959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8m8x8" condition "Ready" to 2026-04-11 17:52:18.131946996 +0000 UTC m=+505.812871111 I0411 17:52:18.163458 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:18.163444526 +0000 UTC m=+505.844368631 I0411 17:52:18.189753 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:58.110860 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:52:58.110816803 +0000 UTC m=+545.791740918 I0411 17:52:58.111375 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:52:58.111398 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:52:58.111393857 +0000 UTC m=+545.792317962 I0411 17:52:58.356326 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:58.356537 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:52:58.356638 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:52:58.356561659 +0000 UTC m=+546.037485794 I0411 17:52:58.645388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-clwn7" condition "Approved" to 2026-04-11 17:52:58.645376969 +0000 UTC m=+546.326301084 I0411 17:52:58.664668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-clwn7" condition "Ready" to 2026-04-11 17:52:58.664659444 +0000 UTC m=+546.345583539 I0411 17:52:58.703923 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:58.703906605 +0000 UTC m=+546.384830720 I0411 17:52:58.720493 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:58.721085 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:58.7210783 +0000 UTC m=+546.402002405 I0411 17:52:58.743621 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:58.744195 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:58.744184537 +0000 UTC m=+546.425108662