I0418 22:09:22.409878 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 22:09:22.409999 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 22:09:22.410078 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 22:09:22.415453 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 22:09:22.415883 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 22:09:22.418169 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 22:09:22.418180 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 22:09:22.419987 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 22:09:22.430388 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 22:09:22.430650 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 22:09:22.435295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 22:09:22.437949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 22:09:22.443630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 22:09:22.446377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 22:09:22.448692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 22:09:22.450927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 22:09:22.452555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 22:09:22.454439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 22:09:22.458004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 22:09:22.466072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 22:09:22.467881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 22:09:22.470042 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 22:09:22.472469 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 22:09:22.475102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 22:09:22.475128 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 22:09:22.475175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 22:09:22.479354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 22:09:22.482312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 22:09:22.482330 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 22:09:22.482336 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 22:09:22.482400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 22:09:22.484451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 22:09:22.489838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 22:09:22.494015 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.494327 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.494767 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.494861 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.507358 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.532708 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.588466 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.588564 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.588975 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:22.624091 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:09:33.718368 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 22:09:33.718348888 +0000 UTC m=+11.338675753 I0418 22:09:34.426339 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:09:34.426324735 +0000 UTC m=+12.046651590 I0418 22:09:34.426695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:09:34.426748 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:09:34.426740786 +0000 UTC m=+12.047067621 E0418 22:09:34.442442 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:09:34.442504 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 22:09:34.442497364 +0000 UTC m=+12.062824199 E0418 22:09:34.442527 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:09:34.447527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:09:34.447634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:09:34.447681 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:09:34.447651498 +0000 UTC m=+12.067978333 E0418 22:09:34.460805 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 22:09:34.460943 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:09:34.461001 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:09:34.461034 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 22:09:34.489264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:09:34.493007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zg5gj" condition "Approved" to 2026-04-18 22:09:34.492997098 +0000 UTC m=+12.113323933 I0418 22:09:34.512421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zg5gj" condition "Ready" to 2026-04-18 22:09:34.512409597 +0000 UTC m=+12.132736422 I0418 22:09:34.540152 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:09:34.540141738 +0000 UTC m=+12.160468573 I0418 22:09:34.559400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:09:34.559727 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:09:34.559720302 +0000 UTC m=+12.180047137 I0418 22:09:34.565669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:09:34.574962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:09:39.461547 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:09:39.461529397 +0000 UTC m=+17.081856252 I0418 22:10:02.322958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:10:02.323016 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:10:02.32300899 +0000 UTC m=+39.943335825 I0418 22:10:02.323005 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 22:10:02.322981239 +0000 UTC m=+39.943308074 I0418 22:10:02.337264 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 22:10:02.337252963 +0000 UTC m=+39.957579798 I0418 22:10:02.348583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:10:02.348658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:10:02.348682 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:10:02.348676516 +0000 UTC m=+39.969003351 I0418 22:10:02.613005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:10:02.621762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hsbnm" condition "Approved" to 2026-04-18 22:10:02.621755038 +0000 UTC m=+40.242081873 I0418 22:10:02.653815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hsbnm" condition "Ready" to 2026-04-18 22:10:02.65380628 +0000 UTC m=+40.274133105 I0418 22:10:02.687146 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:10:02.687128989 +0000 UTC m=+40.307455844 I0418 22:10:02.704119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:10:02.704440 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:10:02.704433877 +0000 UTC m=+40.324760712 I0418 22:10:02.722354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:14:18.449855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:14:18.449858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-18 22:14:18.4498301 +0000 UTC m=+296.070156935 I0418 22:14:18.449930 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-18 22:14:18.449922303 +0000 UTC m=+296.070249138 I0418 22:14:18.465641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:14:18.465728 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-18 22:14:18.465720138 +0000 UTC m=+296.086046973 I0418 22:14:18.683097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:14:18.712508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-blfxb" condition "Approved" to 2026-04-18 22:14:18.71249075 +0000 UTC m=+296.332817605 I0418 22:14:18.743079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-blfxb" condition "Ready" to 2026-04-18 22:14:18.743064637 +0000 UTC m=+296.363391482 I0418 22:14:18.771634 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:14:18.771609488 +0000 UTC m=+296.391936323 I0418 22:14:18.796957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:22.428811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:15:22.428796312 +0000 UTC m=+360.049123147 I0418 22:15:22.428836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:15:22.428884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 22:15:22.428876314 +0000 UTC m=+360.049203149 E0418 22:15:22.445406 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:15:22.445455 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 22:15:22.445444739 +0000 UTC m=+360.065771604 E0418 22:15:22.445517 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:15:22.449150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:22.449201 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:15:22.449196271 +0000 UTC m=+360.069523096 E0418 22:15:22.460497 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 22:15:22.460669 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:15:22.460795 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:15:22.460925 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 22:15:22.469500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:22.486580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8j2np" condition "Approved" to 2026-04-18 22:15:22.486569023 +0000 UTC m=+360.106895878 I0418 22:15:22.498037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8j2np" condition "Ready" to 2026-04-18 22:15:22.498032293 +0000 UTC m=+360.118359118 I0418 22:15:22.522007 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:22.521995957 +0000 UTC m=+360.142322792 I0418 22:15:22.544083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:22.544391 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:22.544381554 +0000 UTC m=+360.164708389 I0418 22:15:22.557181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:22.557475 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:22.557465113 +0000 UTC m=+360.177791948 I0418 22:15:27.461727 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:27.461701244 +0000 UTC m=+365.082028109 I0418 22:16:06.602935 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:16:06.602921482 +0000 UTC m=+404.223248307 I0418 22:16:06.603208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:06.603247 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:16:06.603244579 +0000 UTC m=+404.223571404 I0418 22:16:06.610110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:06.610147 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:16:06.610141184 +0000 UTC m=+404.230468009 I0418 22:16:06.610540 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:16:06.610535892 +0000 UTC m=+404.230862717 I0418 22:16:06.639644 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:16:06.639630324 +0000 UTC m=+404.259957159 I0418 22:16:06.639875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:06.639946 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:16:06.63990887 +0000 UTC m=+404.260235695 I0418 22:16:06.654156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.654231 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:16:06.654224361 +0000 UTC m=+404.274551186 I0418 22:16:06.654566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.654603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:06.654636 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:16:06.654632629 +0000 UTC m=+404.274959454 I0418 22:16:06.670594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.670660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:06.670748 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:16:06.670742279 +0000 UTC m=+404.291069104 I0418 22:16:06.766855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.775355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-526qh" condition "Approved" to 2026-04-18 22:16:06.77534005 +0000 UTC m=+404.395666895 I0418 22:16:06.790844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-526qh" condition "Ready" to 2026-04-18 22:16:06.790833745 +0000 UTC m=+404.411160570 I0418 22:16:06.829627 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:06.829616151 +0000 UTC m=+404.449942976 I0418 22:16:06.852560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.853109 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:06.852945841 +0000 UTC m=+404.473272676 I0418 22:16:06.878197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.881457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.895702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:06.903145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rtxdj" condition "Approved" to 2026-04-18 22:16:06.903136147 +0000 UTC m=+404.523462962 I0418 22:16:06.927357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rtxdj" condition "Ready" to 2026-04-18 22:16:06.927347627 +0000 UTC m=+404.547674452 I0418 22:16:06.994848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4zxps" condition "Approved" to 2026-04-18 22:16:06.994817837 +0000 UTC m=+404.615144672 I0418 22:16:07.252803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4zxps" condition "Ready" to 2026-04-18 22:16:07.252785877 +0000 UTC m=+404.873112742 I0418 22:16:07.492815 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:07.492796891 +0000 UTC m=+405.113123746 I0418 22:16:07.747158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:07.747684 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:07.747677296 +0000 UTC m=+405.368004131 I0418 22:16:07.843535 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:07.843517346 +0000 UTC m=+405.463844211 I0418 22:16:08.140967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:08.190132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:15.782727 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" condition "Ready" to 2026-04-18 22:16:15.782709812 +0000 UTC m=+413.403036647 I0418 22:16:15.782806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:15.782849 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" condition "Issuing" to 2026-04-18 22:16:15.782838524 +0000 UTC m=+413.403165359 I0418 22:16:15.798836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:15.798914 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" condition "Ready" to 2026-04-18 22:16:15.798905394 +0000 UTC m=+413.419232229 I0418 22:16:15.895757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:15.925964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fl8f6-jkh9m" condition "Approved" to 2026-04-18 22:16:15.925952865 +0000 UTC m=+413.546279690 I0418 22:16:15.946076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fl8f6-jkh9m" condition "Ready" to 2026-04-18 22:16:15.946065967 +0000 UTC m=+413.566392802 I0418 22:16:15.973993 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:15.973978899 +0000 UTC m=+413.594305734 I0418 22:16:15.994959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fl8f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:29.416204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:29.416523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:16:29.416513529 +0000 UTC m=+427.036840354 I0418 22:16:29.416309 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:16:29.416276195 +0000 UTC m=+427.036603020 I0418 22:16:29.434448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:29.434510 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:16:29.434504993 +0000 UTC m=+427.054831818 I0418 22:16:29.624127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:29.662060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cq5gr" condition "Approved" to 2026-04-18 22:16:29.662044702 +0000 UTC m=+427.282371547 I0418 22:16:29.689140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cq5gr" condition "Ready" to 2026-04-18 22:16:29.689130876 +0000 UTC m=+427.309457701 I0418 22:16:29.719017 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:29.719003084 +0000 UTC m=+427.339329909 I0418 22:16:29.743037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:29.743913 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:29.743878544 +0000 UTC m=+427.364205399 I0418 22:16:29.761602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:29.762142 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:29.762132553 +0000 UTC m=+427.382459388 I0418 22:16:29.763203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:19:51.479910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:19:51.479978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:19:51.479970735 +0000 UTC m=+629.100297560 I0418 22:19:51.480031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:19:51.480005996 +0000 UTC m=+629.100332861 I0418 22:19:51.495199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:19:51.495274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:19:51.495266854 +0000 UTC m=+629.115593709 I0418 22:19:51.691129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:19:51.723640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bqfd5" condition "Approved" to 2026-04-18 22:19:51.723625729 +0000 UTC m=+629.343952554 I0418 22:19:51.748425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bqfd5" condition "Ready" to 2026-04-18 22:19:51.748408372 +0000 UTC m=+629.368735207 I0418 22:19:51.774506 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:19:51.774494084 +0000 UTC m=+629.394820909 I0418 22:19:51.799603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:19:51.800477 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:19:51.800470755 +0000 UTC m=+629.420797580 I0418 22:19:51.826583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:32.647715 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-18 22:20:32.647701657 +0000 UTC m=+670.268028512 I0418 22:20:32.648489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:32.648537 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 22:20:32.648530468 +0000 UTC m=+670.268857323 I0418 22:20:32.669192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:32.669245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:32.669275 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 22:20:32.669270307 +0000 UTC m=+670.289597142 I0418 22:20:32.859367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g75fg" condition "Approved" to 2026-04-18 22:20:32.859358963 +0000 UTC m=+670.479685788 I0418 22:20:32.883712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g75fg" condition "Ready" to 2026-04-18 22:20:32.88370186 +0000 UTC m=+670.504028705 I0418 22:20:32.922965 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:32.922952505 +0000 UTC m=+670.543279330 I0418 22:20:32.946958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:32.949668 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:32.949662266 +0000 UTC m=+670.569989091 I0418 22:20:32.958960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:32.968317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:32.968554 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:32.968543498 +0000 UTC m=+670.588870333