I0426 10:06:01.068777 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0426 10:06:01.068872 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0426 10:06:01.068946 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0426 10:06:01.073148 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0426 10:06:01.073744 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0426 10:06:01.073842 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0426 10:06:01.073885 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0426 10:06:01.079287 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0426 10:06:01.093802 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0426 10:06:01.098764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0426 10:06:01.102019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0426 10:06:01.104874 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0426 10:06:01.104949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0426 10:06:01.108934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0426 10:06:01.111456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0426 10:06:01.113796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0426 10:06:01.116375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0426 10:06:01.118825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0426 10:06:01.120796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0426 10:06:01.122590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0426 10:06:01.128667 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0426 10:06:01.128714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0426 10:06:01.128749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0426 10:06:01.132363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0426 10:06:01.134084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0426 10:06:01.135744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0426 10:06:01.137650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0426 10:06:01.139350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0426 10:06:01.141167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0426 10:06:01.142784 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0426 10:06:01.142803 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0426 10:06:01.142810 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0426 10:06:01.144216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0426 10:06:01.147932 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.148296 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.149026 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.149185 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.160469 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.175146 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.196004 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.204461 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.227607 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:01.239774 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0426 10:06:17.943600 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-26 10:06:17.943545883 +0000 UTC m=+16.902416741 I0426 10:06:18.641121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:06:18.641208 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-26 10:06:18.641198989 +0000 UTC m=+17.600069837 I0426 10:06:18.641589 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-26 10:06:18.641572746 +0000 UTC m=+17.600443604 E0426 10:06:18.656368 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0426 10:06:18.656413 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-26 10:06:18.656407403 +0000 UTC m=+17.615278231 E0426 10:06:18.656445 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0426 10:06:18.659328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:18.659491 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-26 10:06:18.659482852 +0000 UTC m=+17.618353680 E0426 10:06:18.671056 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0426 10:06:18.671257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0426 10:06:18.671321 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0426 10:06:18.671420 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0426 10:06:18.678084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:18.697951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tx5pn" condition "Approved" to 2026-04-26 10:06:18.697940798 +0000 UTC m=+17.656811626 I0426 10:06:18.711128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tx5pn" condition "Ready" to 2026-04-26 10:06:18.711104539 +0000 UTC m=+17.669975387 I0426 10:06:18.736340 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:06:18.736326113 +0000 UTC m=+17.695197051 I0426 10:06:18.751468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:18.751754 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:06:18.75174734 +0000 UTC m=+17.710618168 I0426 10:06:18.770040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:23.671541 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:06:23.671516722 +0000 UTC m=+22.630387570 I0426 10:06:45.745251 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-26 10:06:45.745235473 +0000 UTC m=+44.704106301 I0426 10:06:45.746851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:06:45.746950 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-26 10:06:45.74694014 +0000 UTC m=+44.705810968 I0426 10:06:45.759881 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-26 10:06:45.75986853 +0000 UTC m=+44.718739358 I0426 10:06:45.782719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:45.782787 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-26 10:06:45.782781366 +0000 UTC m=+44.741652184 I0426 10:06:45.861895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:45.891970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zwdzh" condition "Approved" to 2026-04-26 10:06:45.891961581 +0000 UTC m=+44.850832399 I0426 10:06:45.921867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zwdzh" condition "Ready" to 2026-04-26 10:06:45.921856977 +0000 UTC m=+44.880727795 I0426 10:06:45.954628 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:06:45.954614485 +0000 UTC m=+44.913485333 I0426 10:06:45.978452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:06:45.978888 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:06:45.978879522 +0000 UTC m=+44.937750350 I0426 10:06:46.007696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:11:11.748206 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-26 10:11:11.74818316 +0000 UTC m=+310.707053988 I0426 10:11:11.749301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:11:11.749327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-26 10:11:11.749323178 +0000 UTC m=+310.708194006 I0426 10:11:11.768004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:11:11.768061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:11:11.768111 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-26 10:11:11.768069405 +0000 UTC m=+310.726940233 I0426 10:11:12.004805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:11:12.018154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-cjz75" condition "Approved" to 2026-04-26 10:11:12.018136716 +0000 UTC m=+310.977007554 I0426 10:11:12.046381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-cjz75" condition "Ready" to 2026-04-26 10:11:12.046365509 +0000 UTC m=+311.005236377 I0426 10:11:12.068432 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:11:12.068424623 +0000 UTC m=+311.027295451 I0426 10:11:12.087219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:11:12.087771 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:11:12.087760411 +0000 UTC m=+311.046631259 I0426 10:11:12.109554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:12:19.458674 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-26 10:12:19.458643206 +0000 UTC m=+378.417514034 I0426 10:12:19.459295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:12:19.459511 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-26 10:12:19.459367759 +0000 UTC m=+378.418238667 E0426 10:12:19.532730 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0426 10:12:19.532861 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-26 10:12:19.532847206 +0000 UTC m=+378.491718064 E0426 10:12:19.532960 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0426 10:12:19.538181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:12:19.538506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:12:19.538554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-26 10:12:19.538541669 +0000 UTC m=+378.497412527 E0426 10:12:19.548533 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0426 10:12:19.548899 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0426 10:12:19.549318 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0426 10:12:19.549555 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0426 10:12:19.608753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sdcgr" condition "Approved" to 2026-04-26 10:12:19.608737433 +0000 UTC m=+378.567608261 I0426 10:12:19.627337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sdcgr" condition "Ready" to 2026-04-26 10:12:19.627319549 +0000 UTC m=+378.586190377 I0426 10:12:19.777688 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:12:19.777662838 +0000 UTC m=+378.736533686 I0426 10:12:20.014698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:12:20.015351 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:12:20.015334741 +0000 UTC m=+378.974205609 I0426 10:12:20.077522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:12:24.549505 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:12:24.549492951 +0000 UTC m=+383.508363779 I0426 10:13:07.619577 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-26 10:13:07.619537273 +0000 UTC m=+426.578408101 I0426 10:13:07.626715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.627812 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-26 10:13:07.627800028 +0000 UTC m=+426.586670846 I0426 10:13:07.628125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.628143 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-26 10:13:07.6281402 +0000 UTC m=+426.587011008 I0426 10:13:07.626759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-26 10:13:07.626752651 +0000 UTC m=+426.585623469 I0426 10:13:07.641822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-26 10:13:07.641813451 +0000 UTC m=+426.600684279 I0426 10:13:07.642068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.642091 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-26 10:13:07.642087363 +0000 UTC m=+426.600958191 I0426 10:13:07.663295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:07.663353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.663370 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-26 10:13:07.663365594 +0000 UTC m=+426.622236412 I0426 10:13:07.669405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:07.669504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.669588 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-26 10:13:07.669583635 +0000 UTC m=+426.628454453 I0426 10:13:07.690626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:07.690676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:07.690736 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-26 10:13:07.690690056 +0000 UTC m=+426.649560884 I0426 10:13:07.903356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rzpwt" condition "Approved" to 2026-04-26 10:13:07.903295086 +0000 UTC m=+426.862165894 I0426 10:13:07.927141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rzpwt" condition "Ready" to 2026-04-26 10:13:07.927104704 +0000 UTC m=+426.885975532 I0426 10:13:07.976338 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:07.976326631 +0000 UTC m=+426.935197449 I0426 10:13:07.997676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-69m7v" condition "Approved" to 2026-04-26 10:13:07.997668422 +0000 UTC m=+426.956539250 I0426 10:13:07.999299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:08.020213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-69m7v" condition "Ready" to 2026-04-26 10:13:08.020202633 +0000 UTC m=+426.979073451 I0426 10:13:08.050252 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:08.050234004 +0000 UTC m=+427.009104832 I0426 10:13:08.094718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:08.095207 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:08.095199774 +0000 UTC m=+427.054070602 I0426 10:13:08.212007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:08.317689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85cgf" condition "Approved" to 2026-04-26 10:13:08.31766754 +0000 UTC m=+427.276538398 I0426 10:13:08.411935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:08.739706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85cgf" condition "Ready" to 2026-04-26 10:13:08.739691509 +0000 UTC m=+427.698562327 I0426 10:13:09.062535 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:09.062523758 +0000 UTC m=+428.021394576 I0426 10:13:09.108053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:09.108291 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:09.108284915 +0000 UTC m=+428.067155743 I0426 10:13:09.464916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:09.466678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0426 10:13:09.468770 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-fknt7\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0426 10:13:25.423009 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" condition "Ready" to 2026-04-26 10:13:25.422988943 +0000 UTC m=+444.381859771 I0426 10:13:25.423250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:25.423291 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" condition "Issuing" to 2026-04-26 10:13:25.423282155 +0000 UTC m=+444.382152973 I0426 10:13:25.539457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:25.539565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:25.539595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" condition "Issuing" to 2026-04-26 10:13:25.539585184 +0000 UTC m=+444.498456042 I0426 10:13:26.260916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w9qd9-h9n8x" condition "Approved" to 2026-04-26 10:13:26.260873677 +0000 UTC m=+445.219744505 I0426 10:13:26.343910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w9qd9-h9n8x" condition "Ready" to 2026-04-26 10:13:26.343887693 +0000 UTC m=+445.302758551 I0426 10:13:26.606489 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:26.606466041 +0000 UTC m=+445.565336879 I0426 10:13:26.743466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:26.743895 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:26.743883971 +0000 UTC m=+445.702754799 I0426 10:13:26.857305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9qd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:55.693356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:13:55.693488 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-26 10:13:55.693476003 +0000 UTC m=+474.652346851 I0426 10:13:55.693924 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-26 10:13:55.693905547 +0000 UTC m=+474.652776375 I0426 10:13:55.711035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:55.711179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-26 10:13:55.711171021 +0000 UTC m=+474.670041839 I0426 10:13:55.986410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:56.015697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9r8k7" condition "Approved" to 2026-04-26 10:13:56.015685083 +0000 UTC m=+474.974555911 I0426 10:13:56.034869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9r8k7" condition "Ready" to 2026-04-26 10:13:56.034858656 +0000 UTC m=+474.993729484 I0426 10:13:56.061310 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:56.061299208 +0000 UTC m=+475.020170036 I0426 10:13:56.083324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:13:56.083514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:13:56.083507635 +0000 UTC m=+475.042378453 I0426 10:13:56.107808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:17:23.601316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:17:23.601404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-26 10:17:23.601384254 +0000 UTC m=+682.560255112 I0426 10:17:23.601767 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-26 10:17:23.601759359 +0000 UTC m=+682.560630207 I0426 10:17:23.621244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:17:23.621326 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-26 10:17:23.621320065 +0000 UTC m=+682.580190883 I0426 10:17:23.953082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:17:23.981959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l65j6" condition "Approved" to 2026-04-26 10:17:23.981949264 +0000 UTC m=+682.940820092 I0426 10:17:24.004559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l65j6" condition "Ready" to 2026-04-26 10:17:24.004547505 +0000 UTC m=+682.963418343 I0426 10:17:24.038118 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:17:24.038108062 +0000 UTC m=+682.996978890 I0426 10:17:24.065750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:17:24.065997 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:17:24.065990944 +0000 UTC m=+683.024861772 I0426 10:17:24.069297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:17:24.085209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:18:10.754934 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-26 10:18:10.754912292 +0000 UTC m=+729.713783100 I0426 10:18:10.754938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0426 10:18:10.755457 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-26 10:18:10.755373737 +0000 UTC m=+729.714244605 I0426 10:18:10.774871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:18:10.775040 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-26 10:18:10.775028118 +0000 UTC m=+729.733898946 I0426 10:18:10.989426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:18:11.025383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6wcrk" condition "Approved" to 2026-04-26 10:18:11.025372375 +0000 UTC m=+729.984243183 I0426 10:18:11.047527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6wcrk" condition "Ready" to 2026-04-26 10:18:11.047514555 +0000 UTC m=+730.006385393 I0426 10:18:11.079272 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:18:11.079259508 +0000 UTC m=+730.038130336 I0426 10:18:11.099678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0426 10:18:11.100598 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-26 10:18:11.10059005 +0000 UTC m=+730.059460878 I0426 10:18:11.124486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"