I0427 01:23:50.335486 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 01:23:50.335635 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 01:23:50.335710 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 01:23:50.342361 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 01:23:50.343033 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 01:23:50.343106 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 01:23:50.343208 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 01:23:50.346514 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 01:23:50.362929 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 01:23:50.368186 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 01:23:50.368336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 01:23:50.371299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 01:23:50.378860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 01:23:50.383700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 01:23:50.385862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 01:23:50.385948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 01:23:50.387858 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 01:23:50.388005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 01:23:50.389871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 01:23:50.391840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 01:23:50.393667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 01:23:50.398189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 01:23:50.398244 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 01:23:50.398382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 01:23:50.402157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 01:23:50.405594 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 01:23:50.407524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 01:23:50.409512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 01:23:50.411331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 01:23:50.413084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 01:23:50.413134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 01:23:50.415235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 01:23:50.417441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 01:23:50.422117 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.426456 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.427616 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.439752 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.461096 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.481645 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.493076 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.510034 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.518901 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:23:50.526509 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:24:07.256511 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 01:24:07.256497475 +0000 UTC m=+16.958259824 I0427 01:24:08.064044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:24:08.064103 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:24:08.064094871 +0000 UTC m=+17.765857220 I0427 01:24:08.065159 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 01:24:08.065152881 +0000 UTC m=+17.766915230 E0427 01:24:08.082134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:24:08.082253 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 01:24:08.082246614 +0000 UTC m=+17.784008953 E0427 01:24:08.082275 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:24:08.085443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:08.085506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:24:08.085524 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:24:08.085518049 +0000 UTC m=+17.787280388 E0427 01:24:08.093679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 01:24:08.093915 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:24:08.093984 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:24:08.094046 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 01:24:08.131878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-84mj4" condition "Approved" to 2026-04-27 01:24:08.131863604 +0000 UTC m=+17.833625953 I0427 01:24:08.148188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-84mj4" condition "Ready" to 2026-04-27 01:24:08.148172749 +0000 UTC m=+17.849935098 I0427 01:24:08.268994 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:08.268981194 +0000 UTC m=+17.970743533 I0427 01:24:08.465322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:08.467096 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:08.466994841 +0000 UTC m=+18.168757190 I0427 01:24:08.489326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:08.491059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:08.491200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:08.491543 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:08.491533307 +0000 UTC m=+18.193295656 I0427 01:24:13.094908 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:13.094886922 +0000 UTC m=+22.796649301 I0427 01:24:40.539267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:24:40.539306 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 01:24:40.539299255 +0000 UTC m=+50.241061604 I0427 01:24:40.539975 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:24:40.539934681 +0000 UTC m=+50.241697050 I0427 01:24:40.714211 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 01:24:40.714197226 +0000 UTC m=+50.415959575 I0427 01:24:40.717010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:40.717158 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:24:40.717112451 +0000 UTC m=+50.418874800 I0427 01:24:41.278831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:41.495320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbt4b" condition "Approved" to 2026-04-27 01:24:41.495304777 +0000 UTC m=+51.197067126 I0427 01:24:41.683109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbt4b" condition "Ready" to 2026-04-27 01:24:41.683090321 +0000 UTC m=+51.384852680 I0427 01:24:41.785144 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:41.785130568 +0000 UTC m=+51.486892897 I0427 01:24:41.814737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:41.815064 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:41.815059053 +0000 UTC m=+51.516821392 I0427 01:24:41.827632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:42.022144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:24:42.022663 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:24:42.022652451 +0000 UTC m=+51.724414800 I0427 01:24:42.023723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:32.158253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:32.158347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-04-27 01:30:32.158325679 +0000 UTC m=+401.860088048 I0427 01:30:32.158504 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-04-27 01:30:32.158489795 +0000 UTC m=+401.860252204 I0427 01:30:32.174427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:32.174479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:32.174491 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-04-27 01:30:32.174485141 +0000 UTC m=+401.876247480 I0427 01:30:32.436123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-dlv75" condition "Approved" to 2026-04-27 01:30:32.436103221 +0000 UTC m=+402.137865600 I0427 01:30:32.465792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-dlv75" condition "Ready" to 2026-04-27 01:30:32.465773516 +0000 UTC m=+402.167535885 I0427 01:30:32.496537 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:32.496519034 +0000 UTC m=+402.198281413 I0427 01:30:32.520366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:37.833836 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 01:31:37.833818351 +0000 UTC m=+467.535580690 I0427 01:31:37.834296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:31:37.834346 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:31:37.834336145 +0000 UTC m=+467.536098484 E0427 01:31:37.908437 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:31:37.908512 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 01:31:37.908499525 +0000 UTC m=+467.610261904 E0427 01:31:37.908589 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:31:37.912000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:37.912281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 01:31:37.912266075 +0000 UTC m=+467.614028484 E0427 01:31:38.025675 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 01:31:38.027213 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:31:38.027287 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:31:38.027367 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 01:31:38.068245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:38.227341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dszqf" condition "Approved" to 2026-04-27 01:31:38.227330347 +0000 UTC m=+467.929092686 I0427 01:31:38.315324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dszqf" condition "Ready" to 2026-04-27 01:31:38.315306981 +0000 UTC m=+468.017069360 I0427 01:31:38.472323 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:38.472309747 +0000 UTC m=+468.174072096 I0427 01:31:38.550604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:38.551088 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:38.551078072 +0000 UTC m=+468.252840411 I0427 01:31:38.737021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:43.027194 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:43.027175253 +0000 UTC m=+472.728937632 I0427 01:32:30.481490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:30.481528 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:32:30.481520098 +0000 UTC m=+520.183282437 I0427 01:32:30.481992 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 01:32:30.481987612 +0000 UTC m=+520.183749951 I0427 01:32:30.482765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:30.482799 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 01:32:30.482792662 +0000 UTC m=+520.184555001 I0427 01:32:30.483101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:30.488301 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 01:32:30.488284062 +0000 UTC m=+520.190046431 I0427 01:32:30.483177 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:32:30.483172972 +0000 UTC m=+520.184935301 I0427 01:32:30.483198 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:32:30.483195493 +0000 UTC m=+520.184957832 I0427 01:32:30.617456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.628037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:32:30.617537564 +0000 UTC m=+520.319299903 I0427 01:32:30.632166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.632235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:30.632269 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:32:30.632264165 +0000 UTC m=+520.334026504 I0427 01:32:30.663954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.664209 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:32:30.664197574 +0000 UTC m=+520.365959923 I0427 01:32:30.820924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xbjz2" condition "Approved" to 2026-04-27 01:32:30.820900616 +0000 UTC m=+520.522662995 I0427 01:32:30.849082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xbjz2" condition "Ready" to 2026-04-27 01:32:30.849068693 +0000 UTC m=+520.550831032 I0427 01:32:30.865979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.895670 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:30.895656008 +0000 UTC m=+520.597418377 I0427 01:32:30.908351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2vm9g" condition "Approved" to 2026-04-27 01:32:30.908331895 +0000 UTC m=+520.610094244 I0427 01:32:30.939718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2vm9g" condition "Ready" to 2026-04-27 01:32:30.939697945 +0000 UTC m=+520.641460294 I0427 01:32:30.946112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.946577 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:30.946565905 +0000 UTC m=+520.648328264 I0427 01:32:30.976654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:30.977204 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:30.977195807 +0000 UTC m=+520.678958156 I0427 01:32:31.002040 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:31.002015222 +0000 UTC m=+520.703777601 I0427 01:32:31.027860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:31.052916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:31.324222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tbvgk" condition "Approved" to 2026-04-27 01:32:31.324173949 +0000 UTC m=+521.025936318 I0427 01:32:31.751073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:31.757968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tbvgk" condition "Ready" to 2026-04-27 01:32:31.757943814 +0000 UTC m=+521.459706173 I0427 01:32:31.990341 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:31.990322137 +0000 UTC m=+521.692084516 I0427 01:32:32.043346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:32.044185 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:32.044175928 +0000 UTC m=+521.745938277 I0427 01:32:32.241767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:45.562303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:45.562384 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" condition "Issuing" to 2026-04-27 01:32:45.562371848 +0000 UTC m=+535.264134207 I0427 01:32:45.563095 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" condition "Ready" to 2026-04-27 01:32:45.563065033 +0000 UTC m=+535.264827722 I0427 01:32:45.584325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:45.584436 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" condition "Ready" to 2026-04-27 01:32:45.584423759 +0000 UTC m=+535.286186108 I0427 01:32:45.982978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:46.207717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6wxkk-8k2rv" condition "Approved" to 2026-04-27 01:32:46.207702572 +0000 UTC m=+535.909464921 I0427 01:32:46.314372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6wxkk-8k2rv" condition "Ready" to 2026-04-27 01:32:46.314359234 +0000 UTC m=+536.016121583 I0427 01:32:46.548475 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:46.548454506 +0000 UTC m=+536.250216845 I0427 01:32:46.823613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:46.824105 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:46.824093588 +0000 UTC m=+536.525855957 I0427 01:32:47.009573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6wxkk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:05.529223 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:33:05.5291914 +0000 UTC m=+555.230953739 I0427 01:33:05.529620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:33:05.529677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 01:33:05.529664355 +0000 UTC m=+555.231426724 I0427 01:33:05.550157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:05.550256 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:33:05.550246938 +0000 UTC m=+555.252009287 I0427 01:33:05.846358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:05.885572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-csmtr" condition "Approved" to 2026-04-27 01:33:05.885538518 +0000 UTC m=+555.587300867 I0427 01:33:05.919930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-csmtr" condition "Ready" to 2026-04-27 01:33:05.919917737 +0000 UTC m=+555.621680076 I0427 01:33:05.969904 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:05.969879413 +0000 UTC m=+555.671641782 I0427 01:33:06.005654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:21.084607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:36:21.084653 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 01:36:21.084643233 +0000 UTC m=+750.786405602 I0427 01:36:21.085311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:36:21.08528564 +0000 UTC m=+750.787048079 I0427 01:36:21.127800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:21.129959 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:36:21.129942133 +0000 UTC m=+750.831704472 I0427 01:36:21.323827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:21.362873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-66w8v" condition "Approved" to 2026-04-27 01:36:21.362854769 +0000 UTC m=+751.064617118 I0427 01:36:21.382507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-66w8v" condition "Ready" to 2026-04-27 01:36:21.382492423 +0000 UTC m=+751.084254772 I0427 01:36:21.410982 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:36:21.410962848 +0000 UTC m=+751.112725197 I0427 01:36:21.438154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:02.444286 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 01:37:02.444250545 +0000 UTC m=+792.146012914 I0427 01:37:02.444729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:37:02.444900 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 01:37:02.444885137 +0000 UTC m=+792.146647516 I0427 01:37:02.483074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:02.483418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:37:02.483627 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 01:37:02.483610452 +0000 UTC m=+792.185372891 I0427 01:37:03.583909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:03.754226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2qcdz" condition "Approved" to 2026-04-27 01:37:03.754211499 +0000 UTC m=+793.455973828 I0427 01:37:03.903786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2qcdz" condition "Ready" to 2026-04-27 01:37:03.903768617 +0000 UTC m=+793.605530986 I0427 01:37:03.989307 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:37:03.989288191 +0000 UTC m=+793.691050560 I0427 01:37:04.026567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:04.081897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"