I0428 07:20:38.028147 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 07:20:38.028272 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 07:20:38.028341 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 07:20:38.035555 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 07:20:38.036225 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 07:20:38.036304 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 07:20:38.036342 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 07:20:38.040292 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 07:20:38.057256 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 07:20:38.062433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 07:20:38.069157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 07:20:38.070321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 07:20:38.072887 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 07:20:38.075441 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 07:20:38.075464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 07:20:38.075476 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 07:20:38.075535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 07:20:38.078117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 07:20:38.080748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 07:20:38.082687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 07:20:38.084746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 07:20:38.090758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 07:20:38.095662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 07:20:38.098022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 07:20:38.100715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 07:20:38.102633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 07:20:38.104623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 07:20:38.104653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 07:20:38.104663 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 07:20:38.105520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 07:20:38.106860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 07:20:38.108646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 07:20:38.110939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 07:20:38.113831 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.114417 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.114854 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.115197 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.115725 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.116181 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.116514 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.116976 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.117170 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:38.192003 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 07:20:55.446061 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 07:20:55.446018941 +0000 UTC m=+17.448513524 I0428 07:20:56.221422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:20:56.221515 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 07:20:56.221502288 +0000 UTC m=+18.223996871 I0428 07:20:56.223500 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 07:20:56.223435837 +0000 UTC m=+18.225930430 E0428 07:20:56.235919 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 07:20:56.235970 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 07:20:56.235963414 +0000 UTC m=+18.238457967 E0428 07:20:56.235995 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 07:20:56.239116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:20:56.239360 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 07:20:56.239346361 +0000 UTC m=+18.241840954 E0428 07:20:56.250456 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 07:20:56.250594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 07:20:56.250645 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 07:20:56.250700 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 07:20:56.254749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:20:56.274696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fkbb2" condition "Approved" to 2026-04-28 07:20:56.27467371 +0000 UTC m=+18.277168303 I0428 07:20:56.288369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fkbb2" condition "Ready" to 2026-04-28 07:20:56.288360881 +0000 UTC m=+18.290855424 I0428 07:20:56.314740 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:20:56.314724383 +0000 UTC m=+18.317218936 I0428 07:20:56.329652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:20:56.329928 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:20:56.329920394 +0000 UTC m=+18.332414957 I0428 07:20:56.354105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:21:01.251042 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:21:01.25102701 +0000 UTC m=+23.253521573 I0428 07:21:23.668470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:21:23.668513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 07:21:23.66848691 +0000 UTC m=+45.670981503 I0428 07:21:23.668539 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 07:21:23.668526341 +0000 UTC m=+45.671020924 I0428 07:21:23.712967 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 07:21:23.712951424 +0000 UTC m=+45.715445987 I0428 07:21:23.716414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:21:23.716577 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 07:21:23.716566034 +0000 UTC m=+45.719060587 I0428 07:21:23.812474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:21:23.853042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9bw2r" condition "Approved" to 2026-04-28 07:21:23.853023255 +0000 UTC m=+45.855517818 I0428 07:21:23.887232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9bw2r" condition "Ready" to 2026-04-28 07:21:23.887216006 +0000 UTC m=+45.889710569 I0428 07:21:23.912518 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:21:23.912500842 +0000 UTC m=+45.914995405 I0428 07:21:23.930708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:25:40.561416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-237.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:25:40.561474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Issuing" to 2026-04-28 07:25:40.561462199 +0000 UTC m=+302.563956792 I0428 07:25:40.561428 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready" to 2026-04-28 07:25:40.561403606 +0000 UTC m=+302.563898199 I0428 07:25:40.588390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:25:40.588500 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready" to 2026-04-28 07:25:40.588486633 +0000 UTC m=+302.590981217 I0428 07:25:40.883384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:25:40.909240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-kpg7d" condition "Approved" to 2026-04-28 07:25:40.909224631 +0000 UTC m=+302.911719214 I0428 07:25:40.937061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-kpg7d" condition "Ready" to 2026-04-28 07:25:40.937046303 +0000 UTC m=+302.939540866 I0428 07:25:40.962026 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:25:40.962001257 +0000 UTC m=+302.964495810 I0428 07:25:40.984601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:25:40.985536 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:25:40.985527793 +0000 UTC m=+302.988022356 I0428 07:25:41.004701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.522702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:26:45.522779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 07:26:45.52275977 +0000 UTC m=+367.525254323 I0428 07:26:45.522759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 07:26:45.522747688 +0000 UTC m=+367.525242251 E0428 07:26:45.545823 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 07:26:45.545882 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 07:26:45.545869969 +0000 UTC m=+367.548364562 E0428 07:26:45.546173 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 07:26:45.549923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.550030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:26:45.550055 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 07:26:45.550046081 +0000 UTC m=+367.552540664 E0428 07:26:45.566718 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 07:26:45.566840 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 07:26:45.566884 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 07:26:45.566935 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 07:26:45.674935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.675236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c5jtt" condition "Approved" to 2026-04-28 07:26:45.675216654 +0000 UTC m=+367.677711207 I0428 07:26:45.687951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c5jtt" condition "Ready" to 2026-04-28 07:26:45.687937607 +0000 UTC m=+367.690432170 I0428 07:26:45.722180 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:26:45.722166514 +0000 UTC m=+367.724661077 I0428 07:26:45.749543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.751190 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:26:45.751173189 +0000 UTC m=+367.753667782 I0428 07:26:45.781238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.784089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:26:45.784448 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:26:45.784439548 +0000 UTC m=+367.786934111 I0428 07:26:50.567780 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:26:50.567761861 +0000 UTC m=+372.570256444 I0428 07:27:33.585182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 07:27:33.585139719 +0000 UTC m=+415.587634262 I0428 07:27:33.585527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:33.585540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 07:27:33.585537577 +0000 UTC m=+415.588032130 I0428 07:27:33.598046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:33.598141 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 07:27:33.598130712 +0000 UTC m=+415.600625265 I0428 07:27:33.598200 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 07:27:33.598183578 +0000 UTC m=+415.600678121 I0428 07:27:33.602171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:33.602204 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 07:27:33.602198524 +0000 UTC m=+415.604693077 I0428 07:27:33.602607 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 07:27:33.602602593 +0000 UTC m=+415.605097146 I0428 07:27:33.637345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.637433 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 07:27:33.637425517 +0000 UTC m=+415.639920080 I0428 07:27:33.659290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.659350 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 07:27:33.659344089 +0000 UTC m=+415.661838642 I0428 07:27:33.663159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.663277 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 07:27:33.663266164 +0000 UTC m=+415.665760717 I0428 07:27:33.744416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.779623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cmwsx" condition "Approved" to 2026-04-28 07:27:33.779611564 +0000 UTC m=+415.782106117 I0428 07:27:33.802223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.802804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cmwsx" condition "Ready" to 2026-04-28 07:27:33.802785559 +0000 UTC m=+415.805280122 I0428 07:27:33.806153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.834287 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:33.834268169 +0000 UTC m=+415.836762762 I0428 07:27:33.839753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88gvc" condition "Approved" to 2026-04-28 07:27:33.839735571 +0000 UTC m=+415.842230134 I0428 07:27:33.844718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lc9ts" condition "Approved" to 2026-04-28 07:27:33.844710973 +0000 UTC m=+415.847205536 I0428 07:27:33.857994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88gvc" condition "Ready" to 2026-04-28 07:27:33.857987869 +0000 UTC m=+415.860482422 I0428 07:27:33.860159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:33.868137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lc9ts" condition "Ready" to 2026-04-28 07:27:33.868124366 +0000 UTC m=+415.870618929 I0428 07:27:34.424769 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:34.424753483 +0000 UTC m=+416.427248056 I0428 07:27:34.573902 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:34.573875627 +0000 UTC m=+416.576370210 I0428 07:27:34.671131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:34.671499 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:34.671488835 +0000 UTC m=+416.673983398 I0428 07:27:34.870265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:34.870802 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:34.870791064 +0000 UTC m=+416.873285627 I0428 07:27:35.276086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:35.376048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:35.421409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:41.689490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:41.689529 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" condition "Issuing" to 2026-04-28 07:27:41.689519224 +0000 UTC m=+423.692013787 I0428 07:27:41.689556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" condition "Ready" to 2026-04-28 07:27:41.689526505 +0000 UTC m=+423.692021088 I0428 07:27:41.710340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:41.710470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:41.710506 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" condition "Issuing" to 2026-04-28 07:27:41.710496742 +0000 UTC m=+423.712991295 I0428 07:27:42.011554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h5f9g-hdpf8" condition "Approved" to 2026-04-28 07:27:42.011540437 +0000 UTC m=+424.014035000 I0428 07:27:42.032144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h5f9g-hdpf8" condition "Ready" to 2026-04-28 07:27:42.032131429 +0000 UTC m=+424.034625982 I0428 07:27:42.064633 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:42.064616233 +0000 UTC m=+424.067110786 I0428 07:27:42.087838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:42.133828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h5f9g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:53.151354 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 07:27:53.151337116 +0000 UTC m=+435.153831679 I0428 07:27:53.151639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:53.151708 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 07:27:53.151695925 +0000 UTC m=+435.154190488 I0428 07:27:53.205174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:53.205287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:27:53.205329 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 07:27:53.20532187 +0000 UTC m=+435.207816433 I0428 07:27:53.377229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:53.398876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gzpfz" condition "Approved" to 2026-04-28 07:27:53.398861841 +0000 UTC m=+435.401356404 I0428 07:27:53.420316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gzpfz" condition "Ready" to 2026-04-28 07:27:53.420265731 +0000 UTC m=+435.422760284 I0428 07:27:53.444403 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:53.444392001 +0000 UTC m=+435.446886564 I0428 07:27:53.464529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:27:53.464931 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:27:53.464922693 +0000 UTC m=+435.467417246 I0428 07:27:53.481225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:12.530861 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 07:31:12.530844024 +0000 UTC m=+634.533338587 I0428 07:31:12.531236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:31:12.531259 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 07:31:12.531255509 +0000 UTC m=+634.533750072 I0428 07:31:12.547153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:12.547363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:31:12.547393 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 07:31:12.547385239 +0000 UTC m=+634.549879792 I0428 07:31:12.804281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dsk89" condition "Approved" to 2026-04-28 07:31:12.804258434 +0000 UTC m=+634.806752997 I0428 07:31:12.827551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dsk89" condition "Ready" to 2026-04-28 07:31:12.827535071 +0000 UTC m=+634.830029654 I0428 07:31:12.856265 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:12.856251058 +0000 UTC m=+634.858745611 I0428 07:31:12.881409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:12.881780 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:12.881773585 +0000 UTC m=+634.884268128 I0428 07:31:12.916407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:12.916696 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:12.91668612 +0000 UTC m=+634.919180673 I0428 07:31:52.725095 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 07:31:52.725076823 +0000 UTC m=+674.727571386 I0428 07:31:52.725550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:31:52.725671 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 07:31:52.725658837 +0000 UTC m=+674.728153420 I0428 07:31:52.746637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:52.746872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 07:31:52.746947 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 07:31:52.746937966 +0000 UTC m=+674.749432529 I0428 07:31:52.918940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:52.937357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kwfzg" condition "Approved" to 2026-04-28 07:31:52.937265922 +0000 UTC m=+674.939760485 I0428 07:31:52.965431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kwfzg" condition "Ready" to 2026-04-28 07:31:52.965418917 +0000 UTC m=+674.967913480 I0428 07:31:52.993733 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:52.99371814 +0000 UTC m=+674.996212703 I0428 07:31:53.014226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:53.014518 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:53.01451123 +0000 UTC m=+675.017005783 I0428 07:31:53.039421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 07:31:53.039821 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 07:31:53.039810924 +0000 UTC m=+675.042305487