I0416 22:43:42.565031 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 22:43:42.565167 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 22:43:42.565260 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 22:43:42.569012 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 22:43:42.569429 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 22:43:42.569582 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 22:43:42.569581 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 22:43:42.572005 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 22:43:42.590700 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 22:43:42.595717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 22:43:42.602138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 22:43:42.604791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 22:43:42.607477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 22:43:42.609925 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 22:43:42.609963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 22:43:42.609965 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 22:43:42.610016 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 22:43:42.612545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 22:43:42.614318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 22:43:42.619290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 22:43:42.621128 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 22:43:42.621248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 22:43:42.623185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 22:43:42.625033 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 22:43:42.625109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 22:43:42.627007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 22:43:42.628850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 22:43:42.630744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 22:43:42.632707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 22:43:42.639190 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 22:43:42.639277 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 22:43:42.643064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 22:43:42.646777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 22:43:42.650773 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.651526 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.652504 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.672078 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.687744 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.701301 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.737369 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.738956 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.759289 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:43:42.782229 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:44:00.658683 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 22:44:00.658669033 +0000 UTC m=+18.128943516 I0416 22:44:01.325128 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 22:44:01.325109842 +0000 UTC m=+18.795384345 I0416 22:44:01.325311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:44:01.325388 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 22:44:01.32537826 +0000 UTC m=+18.795652763 E0416 22:44:01.339394 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:44:01.339472 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 22:44:01.339445041 +0000 UTC m=+18.809719514 E0416 22:44:01.339496 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:44:01.344832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:01.344898 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 22:44:01.344891391 +0000 UTC m=+18.815165874 E0416 22:44:01.350798 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 22:44:01.350896 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:44:01.350929 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:44:01.350961 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 22:44:01.362304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:01.381332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bkrxs" condition "Approved" to 2026-04-16 22:44:01.381322053 +0000 UTC m=+18.851596536 I0416 22:44:01.396708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bkrxs" condition "Ready" to 2026-04-16 22:44:01.396694351 +0000 UTC m=+18.866968864 I0416 22:44:01.422483 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:01.422467266 +0000 UTC m=+18.892741779 I0416 22:44:01.441770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:01.442038 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:01.44203052 +0000 UTC m=+18.912305003 I0416 22:44:01.453433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:01.456073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:01.456354 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:01.456343168 +0000 UTC m=+18.926617651 I0416 22:44:06.351462 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:06.351449029 +0000 UTC m=+23.821723542 I0416 22:44:27.419998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:44:27.420062 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 22:44:27.420055325 +0000 UTC m=+44.890329798 I0416 22:44:27.420434 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 22:44:27.420428948 +0000 UTC m=+44.890703421 I0416 22:44:27.432485 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 22:44:27.43247529 +0000 UTC m=+44.902749763 I0416 22:44:27.470909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:27.470979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:44:27.470998 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 22:44:27.470993542 +0000 UTC m=+44.941268005 I0416 22:44:27.641242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4xzfj" condition "Approved" to 2026-04-16 22:44:27.641232803 +0000 UTC m=+45.111507266 I0416 22:44:27.669523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4xzfj" condition "Ready" to 2026-04-16 22:44:27.66950836 +0000 UTC m=+45.139782853 I0416 22:44:27.699802 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:27.699789741 +0000 UTC m=+45.170064224 I0416 22:44:27.725000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:27.725510 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:44:27.725500877 +0000 UTC m=+45.195775360 I0416 22:44:27.736890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:44:27.750215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:48:44.668516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:48:44.668570 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-16 22:48:44.6685597 +0000 UTC m=+302.138834213 I0416 22:48:44.668677 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-16 22:48:44.668656221 +0000 UTC m=+302.138930704 I0416 22:48:44.685017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:48:44.685501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:48:44.685577 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-16 22:48:44.68556715 +0000 UTC m=+302.155841633 I0416 22:48:44.794308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:48:44.803900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-gngm6" condition "Approved" to 2026-04-16 22:48:44.803890336 +0000 UTC m=+302.274164819 I0416 22:48:44.836589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-gngm6" condition "Ready" to 2026-04-16 22:48:44.836570803 +0000 UTC m=+302.306845306 I0416 22:48:44.868357 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:48:44.868324596 +0000 UTC m=+302.338599079 I0416 22:48:44.887174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:48:44.887744 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:48:44.887716039 +0000 UTC m=+302.357990522 I0416 22:48:44.908664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:49:49.126615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:49:49.126701 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 22:49:49.12664785 +0000 UTC m=+366.596922333 I0416 22:49:49.127239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 22:49:49.12665402 +0000 UTC m=+366.596928533 E0416 22:49:49.140332 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:49:49.140377 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 22:49:49.140367009 +0000 UTC m=+366.610641492 E0416 22:49:49.140440 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:49:49.151186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:49:49.151260 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 22:49:49.151244388 +0000 UTC m=+366.621518861 E0416 22:49:49.155853 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 22:49:49.155932 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:49:49.155963 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:49:49.155998 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 22:49:49.167404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:49:49.167473 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 22:49:49.167462738 +0000 UTC m=+366.637737211 I0416 22:49:49.176259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bjh66" condition "Approved" to 2026-04-16 22:49:49.176246166 +0000 UTC m=+366.646520659 I0416 22:49:49.189193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bjh66" condition "Ready" to 2026-04-16 22:49:49.189175285 +0000 UTC m=+366.659449768 I0416 22:49:49.213706 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:49:49.213685861 +0000 UTC m=+366.683960344 I0416 22:49:49.232086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:49:54.156815 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:49:54.156797295 +0000 UTC m=+371.627071798 I0416 22:50:36.691409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:36.691450 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 22:50:36.691442072 +0000 UTC m=+414.161716535 I0416 22:50:36.691724 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 22:50:36.69172086 +0000 UTC m=+414.161995333 I0416 22:50:36.700942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:36.701022 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 22:50:36.70101141 +0000 UTC m=+414.171285873 I0416 22:50:36.701374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 22:50:36.701369939 +0000 UTC m=+414.171644412 I0416 22:50:36.707545 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 22:50:36.707527953 +0000 UTC m=+414.177802426 I0416 22:50:36.708030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:36.708155 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 22:50:36.708066927 +0000 UTC m=+414.178341400 I0416 22:50:36.749561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:36.749649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:36.749684 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 22:50:36.749675921 +0000 UTC m=+414.219950394 I0416 22:50:36.771945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:36.774082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:36.774138 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 22:50:36.774126994 +0000 UTC m=+414.244401477 I0416 22:50:36.773117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:36.774770 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 22:50:36.774763183 +0000 UTC m=+414.245037686 I0416 22:50:37.049229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z85gh" condition "Approved" to 2026-04-16 22:50:37.049217391 +0000 UTC m=+414.519491854 I0416 22:50:37.076472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z85gh" condition "Ready" to 2026-04-16 22:50:37.076455633 +0000 UTC m=+414.546730096 I0416 22:50:37.104986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:37.108187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7p7xl" condition "Approved" to 2026-04-16 22:50:37.108179193 +0000 UTC m=+414.578453666 I0416 22:50:37.129127 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:37.129113809 +0000 UTC m=+414.599388282 I0416 22:50:37.141681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7p7xl" condition "Ready" to 2026-04-16 22:50:37.141670051 +0000 UTC m=+414.611944524 I0416 22:50:37.170007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:37.170294 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:37.170286693 +0000 UTC m=+414.640561186 I0416 22:50:37.180374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:37.187772 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:37.187760752 +0000 UTC m=+414.658035225 I0416 22:50:37.231097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:37.231458 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:37.231442667 +0000 UTC m=+414.701717130 I0416 22:50:37.260496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z9cgw" condition "Approved" to 2026-04-16 22:50:37.26048583 +0000 UTC m=+414.730760313 I0416 22:50:37.433811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z9cgw" condition "Ready" to 2026-04-16 22:50:37.433796866 +0000 UTC m=+414.904071339 I0416 22:50:37.727418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0416 22:50:37.776528 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2qxd4\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0416 22:50:38.087300 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:38.087280042 +0000 UTC m=+415.557554515 I0416 22:50:38.226404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:38.227116 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:38.227101918 +0000 UTC m=+415.697376431 I0416 22:50:38.426369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:44.879457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:44.879507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" condition "Issuing" to 2026-04-16 22:50:44.879495744 +0000 UTC m=+422.349770257 I0416 22:50:44.879735 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" condition "Ready" to 2026-04-16 22:50:44.87971466 +0000 UTC m=+422.349989133 I0416 22:50:44.898235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:44.898315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:44.898383 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" condition "Issuing" to 2026-04-16 22:50:44.89837278 +0000 UTC m=+422.368647263 I0416 22:50:45.130684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9xjqg-59wwz" condition "Approved" to 2026-04-16 22:50:45.130664375 +0000 UTC m=+422.600938878 I0416 22:50:45.150563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9xjqg-59wwz" condition "Ready" to 2026-04-16 22:50:45.150551582 +0000 UTC m=+422.620826055 I0416 22:50:45.203921 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:45.20390058 +0000 UTC m=+422.674175063 I0416 22:50:45.235801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xjqg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:58.164620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:58.164662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 22:50:58.164652591 +0000 UTC m=+435.634927074 I0416 22:50:58.164841 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 22:50:58.164793495 +0000 UTC m=+435.635067978 I0416 22:50:58.186632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:58.186698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:50:58.186716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 22:50:58.186708974 +0000 UTC m=+435.656983457 I0416 22:50:58.385715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cvp98" condition "Approved" to 2026-04-16 22:50:58.385693368 +0000 UTC m=+435.855967881 I0416 22:50:58.407507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cvp98" condition "Ready" to 2026-04-16 22:50:58.407491533 +0000 UTC m=+435.877766046 I0416 22:50:58.436214 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:58.436199339 +0000 UTC m=+435.906473822 I0416 22:50:58.455207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:58.455630 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:50:58.455621784 +0000 UTC m=+435.925896267 I0416 22:50:58.467564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:50:58.480760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:09.646619 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 22:54:09.646581261 +0000 UTC m=+627.116855764 I0416 22:54:09.646677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:54:09.646722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 22:54:09.646708365 +0000 UTC m=+627.116982878 I0416 22:54:09.667609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:09.667765 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 22:54:09.667760489 +0000 UTC m=+627.138034962 I0416 22:54:09.829817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:09.863037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vbhdn" condition "Approved" to 2026-04-16 22:54:09.863021966 +0000 UTC m=+627.333296439 I0416 22:54:09.886758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vbhdn" condition "Ready" to 2026-04-16 22:54:09.886743339 +0000 UTC m=+627.357017822 I0416 22:54:09.913366 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:54:09.913349432 +0000 UTC m=+627.383623915 I0416 22:54:09.936592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:09.982311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:52.930179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:54:52.930269 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 22:54:52.930260726 +0000 UTC m=+670.400535209 I0416 22:54:52.931087 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 22:54:52.931068443 +0000 UTC m=+670.401342946 I0416 22:54:52.952282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:52.952541 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 22:54:52.952531919 +0000 UTC m=+670.422806392 I0416 22:54:53.114383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:53.145059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r8gpb" condition "Approved" to 2026-04-16 22:54:53.14504351 +0000 UTC m=+670.615317993 I0416 22:54:53.167276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r8gpb" condition "Ready" to 2026-04-16 22:54:53.167262862 +0000 UTC m=+670.637537325 I0416 22:54:53.200680 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:54:53.200657817 +0000 UTC m=+670.670932320 I0416 22:54:53.227884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:53.228454 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:54:53.228444889 +0000 UTC m=+670.698719392 I0416 22:54:53.241111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:54:53.257251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"