I0417 18:39:14.568399 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 18:39:14.568568 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 18:39:14.568683 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 18:39:14.573988 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 18:39:14.574463 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 18:39:14.574499 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 18:39:14.574656 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 18:39:14.576885 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 18:39:14.592247 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 18:39:14.599053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 18:39:14.602220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 18:39:14.607859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 18:39:14.609799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 18:39:14.611605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 18:39:14.614208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 18:39:14.616729 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 18:39:14.617309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 18:39:14.621558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 18:39:14.631905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 18:39:14.634712 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 18:39:14.634744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 18:39:14.634796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 18:39:14.637292 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 18:39:14.637349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 18:39:14.640107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 18:39:14.642578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 18:39:14.644470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 18:39:14.646200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 18:39:14.646221 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 18:39:14.646294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 18:39:14.648550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 18:39:14.650211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 18:39:14.657824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 18:39:14.660747 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.661010 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.661652 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.662366 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.680017 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.691992 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.709699 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.722567 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.738803 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:14.751680 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:39:28.635800 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:39:28.635760354 +0000 UTC m=+14.106825163 I0417 18:39:29.556942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:39:29.556963 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:39:29.556934519 +0000 UTC m=+15.027999418 I0417 18:39:29.557050 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:39:29.557036471 +0000 UTC m=+15.028101310 E0417 18:39:29.574805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:39:29.574896 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:39:29.574886054 +0000 UTC m=+15.045950873 E0417 18:39:29.574925 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:39:29.579641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:29.579713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:39:29.579734 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:39:29.579728757 +0000 UTC m=+15.050793576 E0417 18:39:29.593099 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 18:39:29.594342 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:39:29.594440 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:39:29.594479 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 18:39:29.623246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:29.628912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6p2ls" condition "Approved" to 2026-04-17 18:39:29.628894096 +0000 UTC m=+15.099958915 I0417 18:39:29.645046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6p2ls" condition "Ready" to 2026-04-17 18:39:29.645032422 +0000 UTC m=+15.116097241 I0417 18:39:29.672572 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:39:29.672549621 +0000 UTC m=+15.143614470 I0417 18:39:29.700153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:29.700483 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:39:29.700475497 +0000 UTC m=+15.171540306 I0417 18:39:29.718228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:29.719843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:29.720293 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:39:29.720281795 +0000 UTC m=+15.191346614 I0417 18:39:29.725767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:39:34.593790 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:39:34.593777325 +0000 UTC m=+20.064842144 I0417 18:40:02.369348 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:40:02.369263563 +0000 UTC m=+47.840328382 I0417 18:40:02.369747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:40:02.369812 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:40:02.369799802 +0000 UTC m=+47.840864621 I0417 18:40:02.396228 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:40:02.396212292 +0000 UTC m=+47.867277141 I0417 18:40:02.401032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:02.401097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:40:02.401114 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:40:02.401109688 +0000 UTC m=+47.872174497 I0417 18:40:02.699124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:02.710550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4glj7" condition "Approved" to 2026-04-17 18:40:02.710520336 +0000 UTC m=+48.181585165 I0417 18:40:02.751577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4glj7" condition "Ready" to 2026-04-17 18:40:02.751558164 +0000 UTC m=+48.222622983 I0417 18:40:02.794965 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:02.794937604 +0000 UTC m=+48.266002413 I0417 18:40:02.823877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:02.825084 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:02.825077258 +0000 UTC m=+48.296142057 I0417 18:40:02.855635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:25.010184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:45:25.010213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-17 18:45:25.010208535 +0000 UTC m=+370.481273354 I0417 18:45:25.010651 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-17 18:45:25.01000722 +0000 UTC m=+370.481072039 I0417 18:45:25.036494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:25.036577 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-17 18:45:25.036568812 +0000 UTC m=+370.507633631 I0417 18:45:25.308386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:25.371627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-c7w48" condition "Approved" to 2026-04-17 18:45:25.37161309 +0000 UTC m=+370.842677929 I0417 18:45:25.417773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-c7w48" condition "Ready" to 2026-04-17 18:45:25.417758684 +0000 UTC m=+370.888823503 I0417 18:45:25.458006 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:25.457994506 +0000 UTC m=+370.929059325 I0417 18:45:25.481528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:25.494048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:25.593973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:32.620862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:32.620899 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:46:32.620890177 +0000 UTC m=+438.091954986 I0417 18:46:32.621024 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:46:32.620880697 +0000 UTC m=+438.091945546 E0417 18:46:32.633679 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:46:32.633855 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:46:32.633820217 +0000 UTC m=+438.104885036 E0417 18:46:32.633942 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:46:32.638083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:32.638176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:32.638206 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:46:32.638198723 +0000 UTC m=+438.109263542 E0417 18:46:32.649960 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 18:46:32.650041 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:46:32.650065 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:46:32.650103 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 18:46:32.679270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cjljq" condition "Approved" to 2026-04-17 18:46:32.679260063 +0000 UTC m=+438.150324882 I0417 18:46:32.691524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cjljq" condition "Ready" to 2026-04-17 18:46:32.691511939 +0000 UTC m=+438.162576758 I0417 18:46:32.723973 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:32.723959813 +0000 UTC m=+438.195024642 I0417 18:46:32.738536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:32.738779 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:32.738772895 +0000 UTC m=+438.209837704 I0417 18:46:32.754336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:37.650643 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:37.650628983 +0000 UTC m=+443.121693832 I0417 18:47:21.282738 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:47:21.282695796 +0000 UTC m=+486.753760605 I0417 18:47:21.283390 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:47:21.28338729 +0000 UTC m=+486.754452119 I0417 18:47:21.283102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:21.283562 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:47:21.283557854 +0000 UTC m=+486.754622663 I0417 18:47:21.283265 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:47:21.283259098 +0000 UTC m=+486.754323897 I0417 18:47:21.283309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:21.283799 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:47:21.283794889 +0000 UTC m=+486.754859698 I0417 18:47:21.283883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:21.283918 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:47:21.283896151 +0000 UTC m=+486.754960970 I0417 18:47:21.337853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.337979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:21.338012 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:47:21.338006302 +0000 UTC m=+486.809071101 I0417 18:47:21.342010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.342523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:47:21.342513867 +0000 UTC m=+486.813578696 I0417 18:47:21.357586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.357829 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:47:21.357795712 +0000 UTC m=+486.828860531 I0417 18:47:21.424673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.451546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cccwl" condition "Approved" to 2026-04-17 18:47:21.451536784 +0000 UTC m=+486.922601593 I0417 18:47:21.472091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cccwl" condition "Ready" to 2026-04-17 18:47:21.472081691 +0000 UTC m=+486.943146490 I0417 18:47:21.504390 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:21.504383437 +0000 UTC m=+486.975448246 I0417 18:47:21.522670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.523255 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:21.523241489 +0000 UTC m=+486.994306328 I0417 18:47:21.536208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.546784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.704468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.742896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dss7f" condition "Approved" to 2026-04-17 18:47:21.742868146 +0000 UTC m=+487.213932995 I0417 18:47:21.762904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dss7f" condition "Ready" to 2026-04-17 18:47:21.762888891 +0000 UTC m=+487.233953710 I0417 18:47:21.798544 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:21.798524649 +0000 UTC m=+487.269589468 I0417 18:47:21.821833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:21.822285 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:21.822273043 +0000 UTC m=+487.293337882 I0417 18:47:22.114824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:22.165187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:22.373883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mtlvb" condition "Approved" to 2026-04-17 18:47:22.373868123 +0000 UTC m=+487.844932942 I0417 18:47:22.490343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mtlvb" condition "Ready" to 2026-04-17 18:47:22.490330467 +0000 UTC m=+487.961395276 I0417 18:47:22.916981 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:22.91696606 +0000 UTC m=+488.388030879 I0417 18:47:23.017829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:23.018477 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:23.018452586 +0000 UTC m=+488.489517405 I0417 18:47:23.297255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:23.328074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:44.100148 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" condition "Ready" to 2026-04-17 18:47:44.100111963 +0000 UTC m=+509.571176812 I0417 18:47:44.100461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:44.100648 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" condition "Issuing" to 2026-04-17 18:47:44.100593114 +0000 UTC m=+509.571657923 I0417 18:47:44.116792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xq8np-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:44.116883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:44.116905 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" condition "Issuing" to 2026-04-17 18:47:44.116899328 +0000 UTC m=+509.587964147 I0417 18:47:44.654026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xq8np-gvlxc" condition "Approved" to 2026-04-17 18:47:44.654010789 +0000 UTC m=+510.125075608 I0417 18:47:44.677183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xq8np-gvlxc" condition "Ready" to 2026-04-17 18:47:44.677165678 +0000 UTC m=+510.148230487 I0417 18:47:44.727591 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:44.727572491 +0000 UTC m=+510.198637290 I0417 18:47:44.755618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xq8np-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xq8np-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:51.444925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:51.444986 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:47:51.444972436 +0000 UTC m=+516.916037275 I0417 18:47:51.445632 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:47:51.44562492 +0000 UTC m=+516.916689759 I0417 18:47:51.470806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:51.470914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:51.470936 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:47:51.470929203 +0000 UTC m=+516.941994022 I0417 18:47:51.766670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:51.774997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jfdxr" condition "Approved" to 2026-04-17 18:47:51.774984354 +0000 UTC m=+517.246049163 I0417 18:47:51.798572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jfdxr" condition "Ready" to 2026-04-17 18:47:51.798560631 +0000 UTC m=+517.269625450 I0417 18:47:51.833529 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:51.833511246 +0000 UTC m=+517.304576065 I0417 18:47:51.869802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:07.104849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:51:07.104887 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:51:07.104879499 +0000 UTC m=+712.575944318 I0417 18:51:07.104843 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:51:07.104806167 +0000 UTC m=+712.575871006 I0417 18:51:07.123390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:07.123471 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:51:07.123462007 +0000 UTC m=+712.594526826 I0417 18:51:07.236919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:07.268041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m9djh" condition "Approved" to 2026-04-17 18:51:07.268032198 +0000 UTC m=+712.739097007 I0417 18:51:07.289639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m9djh" condition "Ready" to 2026-04-17 18:51:07.289623949 +0000 UTC m=+712.760688798 I0417 18:51:07.319157 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:07.319137752 +0000 UTC m=+712.790203281 I0417 18:51:07.343180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:07.343454 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:07.343449666 +0000 UTC m=+712.814514475 I0417 18:51:07.350114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:07.358566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"