I0423 00:16:08.655749 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 00:16:08.655876 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 00:16:08.655958 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 00:16:08.661599 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 00:16:08.661984 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 00:16:08.662081 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 00:16:08.662151 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 00:16:08.665053 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 00:16:08.678724 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 00:16:08.678917 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 00:16:08.682355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 00:16:08.685085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 00:16:08.687448 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 00:16:08.687465 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 00:16:08.688256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 00:16:08.691279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 00:16:08.693964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 00:16:08.696491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 00:16:08.699048 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 00:16:08.699085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 00:16:08.699090 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 00:16:08.701471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 00:16:08.703223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 00:16:08.705308 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 00:16:08.707892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 00:16:08.709400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 00:16:08.711732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 00:16:08.714098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 00:16:08.716426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 00:16:08.718677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 00:16:08.721131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 00:16:08.722985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 00:16:08.724824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 00:16:08.728155 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.730456 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.731117 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.731937 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.746558 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.761854 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.777843 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.789470 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.804851 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:08.828515 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 00:16:21.437900 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 00:16:21.437887775 +0000 UTC m=+12.813404213 I0423 00:16:22.135660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:16:22.135752 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 00:16:22.13574348 +0000 UTC m=+13.511259938 I0423 00:16:22.135818 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 00:16:22.135769621 +0000 UTC m=+13.511286059 I0423 00:16:22.151264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:22.151325 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 00:16:22.151318086 +0000 UTC m=+13.526834524 E0423 00:16:22.155947 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 00:16:22.155999 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 00:16:22.155993794 +0000 UTC m=+13.531510222 E0423 00:16:22.156018 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 00:16:22.172510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0423 00:16:22.174264 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 00:16:22.174471 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 00:16:22.174510 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 00:16:22.174548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 00:16:22.197461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sl6r8" condition "Approved" to 2026-04-23 00:16:22.19745178 +0000 UTC m=+13.572968218 I0423 00:16:22.211746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sl6r8" condition "Ready" to 2026-04-23 00:16:22.211730921 +0000 UTC m=+13.587247349 I0423 00:16:22.233286 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:22.233206148 +0000 UTC m=+13.608722596 I0423 00:16:22.254655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:22.255699 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:22.255687834 +0000 UTC m=+13.631204302 I0423 00:16:22.268606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:22.269673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:22.270470 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:22.270462654 +0000 UTC m=+13.645979082 I0423 00:16:27.175218 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:27.175203544 +0000 UTC m=+18.550719972 I0423 00:16:51.569786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:16:51.569909 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 00:16:51.569866923 +0000 UTC m=+42.945383381 I0423 00:16:51.570409 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 00:16:51.570391922 +0000 UTC m=+42.945908380 I0423 00:16:51.580340 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 00:16:51.580324276 +0000 UTC m=+42.955840734 I0423 00:16:51.608034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:51.608078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:16:51.608091 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 00:16:51.608086551 +0000 UTC m=+42.983602979 I0423 00:16:51.792565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7td6n" condition "Approved" to 2026-04-23 00:16:51.792552364 +0000 UTC m=+43.168068832 I0423 00:16:51.825848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7td6n" condition "Ready" to 2026-04-23 00:16:51.825835525 +0000 UTC m=+43.201351963 I0423 00:16:51.853674 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:51.853662551 +0000 UTC m=+43.229178989 I0423 00:16:51.881053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:51.881814 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:51.881807553 +0000 UTC m=+43.257323991 I0423 00:16:51.905694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:16:51.906046 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:16:51.906037936 +0000 UTC m=+43.281554374 I0423 00:16:51.910804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:22:04.472486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-23 00:22:04.472447728 +0000 UTC m=+355.847964156 I0423 00:22:04.472555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:22:04.472756 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-23 00:22:04.472743464 +0000 UTC m=+355.848259952 I0423 00:22:04.571728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:22:04.571922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:22:04.571971 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-23 00:22:04.571963863 +0000 UTC m=+355.947480291 I0423 00:22:04.939853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-khpdl" condition "Approved" to 2026-04-23 00:22:04.939836666 +0000 UTC m=+356.315353104 I0423 00:22:04.981851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-khpdl" condition "Ready" to 2026-04-23 00:22:04.981840377 +0000 UTC m=+356.357356815 I0423 00:22:05.022946 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:22:05.02293996 +0000 UTC m=+356.398456398 I0423 00:22:05.103189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:22:05.103786 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:22:05.103776245 +0000 UTC m=+356.479292713 I0423 00:22:05.132024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:08.973710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:08.973777 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 00:23:08.973760361 +0000 UTC m=+420.349276799 I0423 00:23:08.973751 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 00:23:08.97374074 +0000 UTC m=+420.349257208 E0423 00:23:09.435409 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 00:23:09.435463 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 00:23:09.43545207 +0000 UTC m=+420.810968528 E0423 00:23:09.435523 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 00:23:09.440719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:09.440794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:09.440819 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 00:23:09.440813311 +0000 UTC m=+420.816329769 E0423 00:23:09.810357 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 00:23:09.810433 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 00:23:09.810463 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 00:23:09.810495 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 00:23:10.675045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fgbr7" condition "Approved" to 2026-04-23 00:23:10.675034912 +0000 UTC m=+422.050551350 I0423 00:23:10.686074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fgbr7" condition "Ready" to 2026-04-23 00:23:10.686061189 +0000 UTC m=+422.061577637 I0423 00:23:10.709497 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:10.709484778 +0000 UTC m=+422.085001216 I0423 00:23:10.726016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:10.726457 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:10.726449776 +0000 UTC m=+422.101966214 I0423 00:23:10.740225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:14.811313 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:14.811298992 +0000 UTC m=+426.186815460 I0423 00:23:56.572695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:56.572970 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 00:23:56.572958909 +0000 UTC m=+467.948475347 I0423 00:23:56.574161 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 00:23:56.574153601 +0000 UTC m=+467.949670059 I0423 00:23:56.581868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:56.581889 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 00:23:56.581885791 +0000 UTC m=+467.957402209 I0423 00:23:56.587201 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 00:23:56.587187557 +0000 UTC m=+467.962703995 I0423 00:23:56.616819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:56.616853 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 00:23:56.616844773 +0000 UTC m=+467.992361211 I0423 00:23:56.617480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 00:23:56.617467225 +0000 UTC m=+467.992983673 I0423 00:23:56.640738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.640815 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 00:23:56.640805866 +0000 UTC m=+468.016322304 I0423 00:23:56.652123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.652199 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 00:23:56.652193353 +0000 UTC m=+468.027709781 I0423 00:23:56.671333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.671378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:23:56.671391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 00:23:56.67138798 +0000 UTC m=+468.046904408 I0423 00:23:56.741902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.772245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hjzcx" condition "Approved" to 2026-04-23 00:23:56.772231954 +0000 UTC m=+468.147748382 I0423 00:23:56.788571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hjzcx" condition "Ready" to 2026-04-23 00:23:56.788562149 +0000 UTC m=+468.164078577 I0423 00:23:56.816737 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:56.816719879 +0000 UTC m=+468.192236307 I0423 00:23:56.841321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.849893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.899833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:56.914244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7st5d" condition "Approved" to 2026-04-23 00:23:56.914223922 +0000 UTC m=+468.289740350 I0423 00:23:56.914286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9fl49" condition "Approved" to 2026-04-23 00:23:56.914273963 +0000 UTC m=+468.289790381 I0423 00:23:56.941712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7st5d" condition "Ready" to 2026-04-23 00:23:56.941702789 +0000 UTC m=+468.317219217 I0423 00:23:56.971357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9fl49" condition "Ready" to 2026-04-23 00:23:56.971336415 +0000 UTC m=+468.346852843 I0423 00:23:57.512281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:57.690014 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:57.690002535 +0000 UTC m=+469.065518953 I0423 00:23:57.713203 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:57.713192105 +0000 UTC m=+469.088708523 I0423 00:23:57.868009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:57.868391 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:23:57.86838478 +0000 UTC m=+469.243901218 I0423 00:23:57.962714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:58.211651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:23:58.511684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:08.438769 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" condition "Ready" to 2026-04-23 00:24:08.438757802 +0000 UTC m=+479.814274240 I0423 00:24:08.439103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:24:08.439164 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" condition "Issuing" to 2026-04-23 00:24:08.439152619 +0000 UTC m=+479.814669057 I0423 00:24:08.457628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:08.457812 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" condition "Ready" to 2026-04-23 00:24:08.457732602 +0000 UTC m=+479.833249040 I0423 00:24:08.651817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:08.681017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jd4z4-q7h7n" condition "Approved" to 2026-04-23 00:24:08.68100407 +0000 UTC m=+480.056520508 I0423 00:24:08.700486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jd4z4-q7h7n" condition "Ready" to 2026-04-23 00:24:08.7004747 +0000 UTC m=+480.075991138 I0423 00:24:08.728063 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:24:08.728048784 +0000 UTC m=+480.103565222 I0423 00:24:08.754371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:08.801011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jd4z4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:37.999602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:24:37.999630 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 00:24:37.999623303 +0000 UTC m=+509.375139731 I0423 00:24:37.999943 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 00:24:37.999939328 +0000 UTC m=+509.375455756 I0423 00:24:38.018579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:38.018704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:24:38.018752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 00:24:38.0187439 +0000 UTC m=+509.394260348 I0423 00:24:38.223298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:38.225540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j4xg2" condition "Approved" to 2026-04-23 00:24:38.225533401 +0000 UTC m=+509.601049829 I0423 00:24:38.240042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j4xg2" condition "Ready" to 2026-04-23 00:24:38.240031827 +0000 UTC m=+509.615548265 I0423 00:24:38.270179 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:24:38.270169539 +0000 UTC m=+509.645685967 I0423 00:24:38.290993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:24:38.334547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:27:43.275156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:27:43.275221 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 00:27:43.275213415 +0000 UTC m=+694.650729853 I0423 00:27:43.275227 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 00:27:43.275205725 +0000 UTC m=+694.650722193 I0423 00:27:43.291299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:27:43.291680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:27:43.291706 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 00:27:43.291700272 +0000 UTC m=+694.667216710 I0423 00:27:43.602914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bphd7" condition "Approved" to 2026-04-23 00:27:43.602904902 +0000 UTC m=+694.978421320 I0423 00:27:43.618027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bphd7" condition "Ready" to 2026-04-23 00:27:43.618018436 +0000 UTC m=+694.993534854 I0423 00:27:43.648691 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:27:43.648678572 +0000 UTC m=+695.024195000 I0423 00:27:43.670345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.622592 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 00:28:24.622572123 +0000 UTC m=+735.998088581 I0423 00:28:24.622714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 00:28:24.622765 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 00:28:24.622757329 +0000 UTC m=+735.998273777 I0423 00:28:24.639028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.639101 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 00:28:24.639094423 +0000 UTC m=+736.014610861 I0423 00:28:24.763142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.801035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-695w9" condition "Approved" to 2026-04-23 00:28:24.80101358 +0000 UTC m=+736.176529998 I0423 00:28:24.823594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-695w9" condition "Ready" to 2026-04-23 00:28:24.823581641 +0000 UTC m=+736.199098079 I0423 00:28:24.858142 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:28:24.858129398 +0000 UTC m=+736.233645836 I0423 00:28:24.888775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.889094 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:28:24.889087013 +0000 UTC m=+736.264603461 I0423 00:28:24.896345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.913155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 00:28:24.913351 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 00:28:24.913343316 +0000 UTC m=+736.288859744