I0410 17:57:10.634784 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0410 17:57:10.635023 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0410 17:57:10.635155 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0410 17:57:10.639496 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0410 17:57:10.639918 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0410 17:57:10.640105 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0410 17:57:10.640183 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0410 17:57:10.642619 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0410 17:57:10.656692 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0410 17:57:10.656962 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0410 17:57:10.663001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0410 17:57:10.669048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0410 17:57:10.671925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0410 17:57:10.674623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0410 17:57:10.677215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0410 17:57:10.679772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0410 17:57:10.682215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0410 17:57:10.688491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0410 17:57:10.691359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0410 17:57:10.693649 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0410 17:57:10.693680 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0410 17:57:10.693824 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0410 17:57:10.693719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0410 17:57:10.693840 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0410 17:57:10.693990 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0410 17:57:10.698007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0410 17:57:10.700852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0410 17:57:10.703218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0410 17:57:10.705783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0410 17:57:10.707961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0410 17:57:10.709622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0410 17:57:10.715132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0410 17:57:10.717951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0410 17:57:10.720537 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.720928 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.721039 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.721492 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.737224 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.762368 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.766353 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.782594 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.797549 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:10.823415 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 17:57:21.534004 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 17:57:21.533988043 +0000 UTC m=+10.929853764 I0410 17:57:22.253572 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 17:57:22.253563205 +0000 UTC m=+11.649428896 I0410 17:57:22.254012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 17:57:22.254150 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 17:57:22.254111917 +0000 UTC m=+11.649977638 E0410 17:57:22.268444 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 17:57:22.268574 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 17:57:22.268568017 +0000 UTC m=+11.664433708 E0410 17:57:22.268608 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 17:57:22.272038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:22.272163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 17:57:22.272202 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 17:57:22.272191122 +0000 UTC m=+11.668056843 E0410 17:57:22.280350 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0410 17:57:22.280417 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 17:57:22.280443 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 17:57:22.280468 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0410 17:57:22.316562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s4vxt" condition "Approved" to 2026-04-10 17:57:22.316553498 +0000 UTC m=+11.712419199 I0410 17:57:22.330421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s4vxt" condition "Ready" to 2026-04-10 17:57:22.330404116 +0000 UTC m=+11.726269797 I0410 17:57:22.359290 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 17:57:22.359273606 +0000 UTC m=+11.755139307 I0410 17:57:22.380742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:22.436329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:27.281525 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 17:57:27.28150406 +0000 UTC m=+16.677369761 I0410 17:57:50.632323 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 17:57:50.632285803 +0000 UTC m=+40.028151534 I0410 17:57:50.632703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 17:57:50.632781 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 17:57:50.632775293 +0000 UTC m=+40.028640984 I0410 17:57:50.650525 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 17:57:50.650511859 +0000 UTC m=+40.046377560 I0410 17:57:50.655620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.655669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 17:57:50.655695 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 17:57:50.655689916 +0000 UTC m=+40.051555617 I0410 17:57:50.786445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.798833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w9gbn" condition "Approved" to 2026-04-10 17:57:50.798823272 +0000 UTC m=+40.194688963 I0410 17:57:50.829675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w9gbn" condition "Ready" to 2026-04-10 17:57:50.829665119 +0000 UTC m=+40.225530820 I0410 17:57:50.860921 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 17:57:50.860906964 +0000 UTC m=+40.256772665 I0410 17:57:50.881369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.882859 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 17:57:50.882845537 +0000 UTC m=+40.278711298 I0410 17:57:50.889316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.898485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.899491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 17:57:50.899661 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 17:57:50.899656444 +0000 UTC m=+40.295522125 I0410 18:02:09.524858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-229.nip.io-tls" condition "Ready" to 2026-04-10 18:02:09.524814323 +0000 UTC m=+298.920680044 I0410 18:02:09.524922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:02:09.525545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-229.nip.io-tls" condition "Issuing" to 2026-04-10 18:02:09.525527898 +0000 UTC m=+298.921393689 I0410 18:02:09.541219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:02:09.541467 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-229.nip.io-tls" condition "Ready" to 2026-04-10 18:02:09.541457764 +0000 UTC m=+298.937323455 I0410 18:02:09.672170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:02:09.701436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-229.nip.io-tls-gvhbz" condition "Approved" to 2026-04-10 18:02:09.701413683 +0000 UTC m=+299.097279384 I0410 18:02:09.725155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-229.nip.io-tls-gvhbz" condition "Ready" to 2026-04-10 18:02:09.725140441 +0000 UTC m=+299.121006152 I0410 18:02:09.751187 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:02:09.751173566 +0000 UTC m=+299.147039277 I0410 18:02:09.768851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:14.801699 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 18:03:14.801672116 +0000 UTC m=+364.197537817 I0410 18:03:14.801864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:03:14.801958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 18:03:14.801951072 +0000 UTC m=+364.197816803 I0410 18:03:14.815379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:14.815544 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 18:03:14.815538813 +0000 UTC m=+364.211404514 E0410 18:03:14.816319 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 18:03:14.816350 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 18:03:14.81634418 +0000 UTC m=+364.212209881 E0410 18:03:14.816397 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 18:03:14.828540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0410 18:03:14.828915 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 18:03:14.828944 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 18:03:14.829029 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0410 18:03:14.831841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:14.837493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:14.858567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jmkwd" condition "Approved" to 2026-04-10 18:03:14.858557354 +0000 UTC m=+364.254423055 I0410 18:03:14.873899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jmkwd" condition "Ready" to 2026-04-10 18:03:14.873884202 +0000 UTC m=+364.269749923 I0410 18:03:14.897057 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:03:14.897021187 +0000 UTC m=+364.292886918 I0410 18:03:14.913296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:14.913749 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:03:14.913737585 +0000 UTC m=+364.309603286 I0410 18:03:14.931055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:03:19.829249 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:03:19.829235843 +0000 UTC m=+369.225101564 I0410 18:04:00.470027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:00.470066 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 18:04:00.470055902 +0000 UTC m=+409.865921593 I0410 18:04:00.470448 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 18:04:00.470443083 +0000 UTC m=+409.866308774 I0410 18:04:00.471932 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 18:04:00.471927515 +0000 UTC m=+409.867793206 I0410 18:04:00.472074 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 18:04:00.472010467 +0000 UTC m=+409.867876188 I0410 18:04:00.472288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:00.472328 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 18:04:00.472319696 +0000 UTC m=+409.868185387 I0410 18:04:00.472349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:00.472368 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 18:04:00.472365247 +0000 UTC m=+409.868230938 I0410 18:04:00.511106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.511158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:00.511173 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 18:04:00.511167008 +0000 UTC m=+409.907032699 I0410 18:04:00.516177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.516513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 18:04:00.516500318 +0000 UTC m=+409.912366019 I0410 18:04:00.521485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.521692 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 18:04:00.521685604 +0000 UTC m=+409.917551305 I0410 18:04:00.729146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.743309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.768600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s4kzl" condition "Approved" to 2026-04-10 18:04:00.768552414 +0000 UTC m=+410.164418115 I0410 18:04:00.793235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tjf74" condition "Approved" to 2026-04-10 18:04:00.793228078 +0000 UTC m=+410.189093779 I0410 18:04:00.794304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s4kzl" condition "Ready" to 2026-04-10 18:04:00.794290158 +0000 UTC m=+410.190155849 I0410 18:04:00.829658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tjf74" condition "Ready" to 2026-04-10 18:04:00.829644182 +0000 UTC m=+410.225509883 I0410 18:04:00.853834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.854400 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:00.854386408 +0000 UTC m=+410.250252099 I0410 18:04:00.868335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r8gfw" condition "Approved" to 2026-04-10 18:04:00.868322709 +0000 UTC m=+410.264188400 I0410 18:04:00.874953 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:00.874944615 +0000 UTC m=+410.270810306 I0410 18:04:00.902242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:00.902786 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:00.902775958 +0000 UTC m=+410.298641659 I0410 18:04:00.919326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r8gfw" condition "Ready" to 2026-04-10 18:04:00.919314473 +0000 UTC m=+410.315180174 I0410 18:04:01.251152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:01.251829 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:01.251822032 +0000 UTC m=+410.647687713 I0410 18:04:01.758883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:01.846284 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:01.846255326 +0000 UTC m=+411.242121027 I0410 18:04:01.854194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:02.001749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:02.002732 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:02.002671742 +0000 UTC m=+411.398537493 I0410 18:04:02.301108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:02.353052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:08.688698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" condition "Ready" to 2026-04-10 18:04:08.688651443 +0000 UTC m=+418.084517174 I0410 18:04:08.688699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:08.688898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" condition "Issuing" to 2026-04-10 18:04:08.68888338 +0000 UTC m=+418.084749101 I0410 18:04:08.704765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:08.705046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:08.705083 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" condition "Issuing" to 2026-04-10 18:04:08.705074331 +0000 UTC m=+418.100940062 I0410 18:04:09.189468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:09.198632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2jmt-f6bzm" condition "Approved" to 2026-04-10 18:04:09.198620152 +0000 UTC m=+418.594485853 I0410 18:04:09.224777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2jmt-f6bzm" condition "Ready" to 2026-04-10 18:04:09.224768385 +0000 UTC m=+418.620634076 I0410 18:04:09.270533 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:09.270518489 +0000 UTC m=+418.666384190 I0410 18:04:09.359721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2jmt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:22.309738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:22.309783 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 18:04:22.3097723 +0000 UTC m=+431.705638031 I0410 18:04:22.309931 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 18:04:22.309917285 +0000 UTC m=+431.705782976 I0410 18:04:22.327460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:22.327540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:04:22.327556 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 18:04:22.327551404 +0000 UTC m=+431.723417095 I0410 18:04:22.556473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jtm5r" condition "Approved" to 2026-04-10 18:04:22.556454389 +0000 UTC m=+431.952320110 I0410 18:04:22.578888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jtm5r" condition "Ready" to 2026-04-10 18:04:22.578876964 +0000 UTC m=+431.974742665 I0410 18:04:22.614213 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:22.614193084 +0000 UTC m=+432.010058775 I0410 18:04:22.635276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:04:22.635552 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:04:22.635543136 +0000 UTC m=+432.031408837 I0410 18:04:22.662475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:07:36.208216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:07:36.208202 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 18:07:36.208176587 +0000 UTC m=+625.604042308 I0410 18:07:36.208249 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 18:07:36.20824137 +0000 UTC m=+625.604107071 I0410 18:07:36.226015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:07:36.226075 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 18:07:36.226068556 +0000 UTC m=+625.621934257 I0410 18:07:36.343871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:07:36.377103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8vkw2" condition "Approved" to 2026-04-10 18:07:36.377092215 +0000 UTC m=+625.772957916 I0410 18:07:36.395935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8vkw2" condition "Ready" to 2026-04-10 18:07:36.395926522 +0000 UTC m=+625.791792213 I0410 18:07:36.429318 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:07:36.429304821 +0000 UTC m=+625.825170512 I0410 18:07:36.448107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:07:36.449089 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:07:36.449079866 +0000 UTC m=+625.844945567 I0410 18:07:36.469576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:08:16.466828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 18:08:16.466860 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 18:08:16.466852564 +0000 UTC m=+665.862718265 I0410 18:08:16.467142 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 18:08:16.467130675 +0000 UTC m=+665.862996376 I0410 18:08:16.482898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:08:16.483009 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 18:08:16.482994984 +0000 UTC m=+665.878860685 I0410 18:08:16.640210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 18:08:16.679290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-47lgq" condition "Approved" to 2026-04-10 18:08:16.679273405 +0000 UTC m=+666.075139106 I0410 18:08:16.705372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-47lgq" condition "Ready" to 2026-04-10 18:08:16.705359217 +0000 UTC m=+666.101224938 I0410 18:08:16.733577 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 18:08:16.733565627 +0000 UTC m=+666.129431338 I0410 18:08:16.752448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"