I0408 00:29:04.389639 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 00:29:04.389804 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 00:29:04.389901 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 00:29:04.393147 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 00:29:04.393524 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 00:29:04.394408 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 00:29:04.394631 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 00:29:04.396142 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 00:29:04.409618 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 00:29:04.415670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 00:29:04.419979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 00:29:04.423114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 00:29:04.426589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 00:29:04.429842 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 00:29:04.430011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 00:29:04.436573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 00:29:04.440154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 00:29:04.442682 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 00:29:04.442798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 00:29:04.445461 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 00:29:04.448153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 00:29:04.450691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 00:29:04.452988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 00:29:04.458940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 00:29:04.462604 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 00:29:04.462687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 00:29:04.465543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 00:29:04.468049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 00:29:04.469991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 00:29:04.471978 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 00:29:04.472001 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 00:29:04.472010 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 00:29:04.472017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 00:29:04.475405 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.475693 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.475700 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.477210 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.499890 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.529768 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.546547 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.564635 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.570114 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:04.585080 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:29:16.147950 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 00:29:16.147938335 +0000 UTC m=+11.793791409 I0408 00:29:16.806773 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 00:29:16.806755529 +0000 UTC m=+12.452608623 I0408 00:29:16.806926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:29:16.807029 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 00:29:16.807017735 +0000 UTC m=+12.452870829 E0408 00:29:16.824475 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:29:16.824543 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 00:29:16.824534458 +0000 UTC m=+12.470387552 E0408 00:29:16.824570 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:29:16.825173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:16.825237 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 00:29:16.825229646 +0000 UTC m=+12.471082740 E0408 00:29:16.841626 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 00:29:16.841709 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:29:16.841745 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:29:16.841780 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 00:29:16.844872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:16.844985 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 00:29:16.844975615 +0000 UTC m=+12.490828689 I0408 00:29:16.849463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:16.851647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8plc5" condition "Approved" to 2026-04-08 00:29:16.851637493 +0000 UTC m=+12.497490567 I0408 00:29:16.855012 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 00:29:16.855005708 +0000 UTC m=+12.500858782 I0408 00:29:16.863132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:16.864184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8plc5" condition "Ready" to 2026-04-08 00:29:16.86417712 +0000 UTC m=+12.510030194 I0408 00:29:16.885210 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:29:16.885193941 +0000 UTC m=+12.531047015 I0408 00:29:16.900094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:16.900571 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:29:16.900563399 +0000 UTC m=+12.546416473 I0408 00:29:16.921183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:21.842515 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:29:21.842451432 +0000 UTC m=+17.488304526 I0408 00:29:41.977748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 00:29:41.977709144 +0000 UTC m=+37.623562248 I0408 00:29:41.978443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:29:41.978505 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 00:29:41.97849242 +0000 UTC m=+37.624345524 I0408 00:29:41.988800 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 00:29:41.988787002 +0000 UTC m=+37.634640066 I0408 00:29:42.011055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:42.011129 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 00:29:42.01112177 +0000 UTC m=+37.656974834 I0408 00:29:42.183895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:42.217454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7xjgz" condition "Approved" to 2026-04-08 00:29:42.217433673 +0000 UTC m=+37.863286777 I0408 00:29:42.256070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7xjgz" condition "Ready" to 2026-04-08 00:29:42.256057567 +0000 UTC m=+37.901910641 I0408 00:29:42.289023 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:29:42.28900681 +0000 UTC m=+37.934859904 I0408 00:29:42.313589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:29:42.313884 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:29:42.313875804 +0000 UTC m=+37.959728888 I0408 00:29:42.332870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:34:02.635997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-08 00:34:02.635974306 +0000 UTC m=+298.281827380 I0408 00:34:02.636381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:34:02.636402 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-08 00:34:02.636398595 +0000 UTC m=+298.282251669 I0408 00:34:02.682702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:34:02.682805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:34:02.682842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-08 00:34:02.682830841 +0000 UTC m=+298.328683945 I0408 00:34:03.152300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-r8nf2" condition "Approved" to 2026-04-08 00:34:03.152289571 +0000 UTC m=+298.798142645 I0408 00:34:03.178941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-r8nf2" condition "Ready" to 2026-04-08 00:34:03.178916253 +0000 UTC m=+298.824769317 I0408 00:34:03.211576 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:34:03.211564889 +0000 UTC m=+298.857417943 I0408 00:34:03.230951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:34:03.275541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:02.770021 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:35:02.769999438 +0000 UTC m=+358.415852512 I0408 00:35:02.770245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:02.770266 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 00:35:02.770262022 +0000 UTC m=+358.416115096 E0408 00:35:02.782713 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:35:02.782739 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 00:35:02.782734182 +0000 UTC m=+358.428587256 E0408 00:35:02.782969 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:35:02.785300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:02.785455 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:35:02.785419047 +0000 UTC m=+358.431272151 E0408 00:35:02.793628 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 00:35:02.793850 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:35:02.794312 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:35:02.794477 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 00:35:02.803726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:02.809731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7rxl2" condition "Approved" to 2026-04-08 00:35:02.809724075 +0000 UTC m=+358.455577149 I0408 00:35:02.813266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:02.813371 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:35:02.813361697 +0000 UTC m=+358.459214791 I0408 00:35:02.823895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7rxl2" condition "Ready" to 2026-04-08 00:35:02.823877693 +0000 UTC m=+358.469730787 I0408 00:35:02.824157 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:35:02.824147637 +0000 UTC m=+358.470000711 I0408 00:35:02.829670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:02.844894 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:02.844882936 +0000 UTC m=+358.490736010 I0408 00:35:02.864000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:07.794231 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:07.794195322 +0000 UTC m=+363.440048416 I0408 00:35:46.994186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:46.994413 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 00:35:46.994358229 +0000 UTC m=+402.640211293 I0408 00:35:46.997363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:46.999537 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 00:35:46.999528865 +0000 UTC m=+402.645381929 I0408 00:35:46.997429 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 00:35:46.997419784 +0000 UTC m=+402.643272908 I0408 00:35:46.999801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:46.999969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 00:35:46.999965602 +0000 UTC m=+402.645818666 I0408 00:35:46.999845 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 00:35:46.999841411 +0000 UTC m=+402.645694465 I0408 00:35:47.001838 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 00:35:47.00182152 +0000 UTC m=+402.647674594 I0408 00:35:47.041035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.043045 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 00:35:47.041202794 +0000 UTC m=+402.687055888 I0408 00:35:47.054716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.055778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 00:35:47.0557701 +0000 UTC m=+402.701623184 I0408 00:35:47.064772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.064823 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 00:35:47.064816755 +0000 UTC m=+402.710669829 I0408 00:35:47.127473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.157243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cnb4p" condition "Approved" to 2026-04-08 00:35:47.157230016 +0000 UTC m=+402.803083090 I0408 00:35:47.177132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cnb4p" condition "Ready" to 2026-04-08 00:35:47.17711597 +0000 UTC m=+402.822969064 I0408 00:35:47.217500 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:47.21748986 +0000 UTC m=+402.863342934 I0408 00:35:47.246063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.328607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.474235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.646765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:47.664304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vb7c7" condition "Approved" to 2026-04-08 00:35:47.664292589 +0000 UTC m=+403.310145663 I0408 00:35:47.682357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vb7c7" condition "Ready" to 2026-04-08 00:35:47.682346127 +0000 UTC m=+403.328199191 I0408 00:35:47.684100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4hhm7" condition "Approved" to 2026-04-08 00:35:47.684092262 +0000 UTC m=+403.329945336 I0408 00:35:48.081247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4hhm7" condition "Ready" to 2026-04-08 00:35:48.081238322 +0000 UTC m=+403.727091386 I0408 00:35:48.168255 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-vb7c7" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-qn9nm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0408 00:35:48.497404 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-qn9nm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0408 00:35:48.522607 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:48.522592784 +0000 UTC m=+404.168445858 I0408 00:35:48.575016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wvg68" condition "Approved" to 2026-04-08 00:35:48.57500488 +0000 UTC m=+404.220857974 I0408 00:35:48.671594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:48.672281 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:48.672267239 +0000 UTC m=+404.318120343 I0408 00:35:48.777448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wvg68" condition "Ready" to 2026-04-08 00:35:48.777433456 +0000 UTC m=+404.423286530 I0408 00:35:49.371686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:49.422213 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:49.422195023 +0000 UTC m=+405.068048117 I0408 00:35:49.574947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:53.337796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" condition "Ready" to 2026-04-08 00:35:53.337777019 +0000 UTC m=+408.983630113 I0408 00:35:53.337970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:53.338072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" condition "Issuing" to 2026-04-08 00:35:53.338063973 +0000 UTC m=+408.983917047 I0408 00:35:53.350152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gshzx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:53.350316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:35:53.350343 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" condition "Issuing" to 2026-04-08 00:35:53.350335103 +0000 UTC m=+408.996188177 I0408 00:35:53.492694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gshzx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:35:53.500928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gshzx-l5xf9" condition "Approved" to 2026-04-08 00:35:53.500913815 +0000 UTC m=+409.146766919 I0408 00:35:53.521161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gshzx-l5xf9" condition "Ready" to 2026-04-08 00:35:53.521148071 +0000 UTC m=+409.167001145 I0408 00:35:53.547571 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:35:53.547556837 +0000 UTC m=+409.193409911 I0408 00:35:53.567201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gshzx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gshzx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:08.811435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:36:08.811489 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 00:36:08.811467244 +0000 UTC m=+424.457320328 I0408 00:36:08.811827 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 00:36:08.811822289 +0000 UTC m=+424.457675363 I0408 00:36:08.829913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:08.830153 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 00:36:08.830142677 +0000 UTC m=+424.475995741 I0408 00:36:08.967590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:09.041141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ddgb8" condition "Approved" to 2026-04-08 00:36:09.041127197 +0000 UTC m=+424.686980271 I0408 00:36:09.060729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ddgb8" condition "Ready" to 2026-04-08 00:36:09.060717513 +0000 UTC m=+424.706570577 I0408 00:36:09.087564 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:36:09.087548511 +0000 UTC m=+424.733401585 I0408 00:36:09.106837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:14.722285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:39:14.722329 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 00:39:14.722310554 +0000 UTC m=+610.368163628 I0408 00:39:14.722737 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 00:39:14.722728318 +0000 UTC m=+610.368581412 I0408 00:39:14.740510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:14.740554 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 00:39:14.740549916 +0000 UTC m=+610.386402970 I0408 00:39:14.903967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:14.939871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xlmt" condition "Approved" to 2026-04-08 00:39:14.939853735 +0000 UTC m=+610.585706839 I0408 00:39:14.957843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xlmt" condition "Ready" to 2026-04-08 00:39:14.957832954 +0000 UTC m=+610.603686018 I0408 00:39:14.991740 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:39:14.99172876 +0000 UTC m=+610.637581834 I0408 00:39:15.014041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:15.014507 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:39:15.014502052 +0000 UTC m=+610.660355116 I0408 00:39:15.042368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:52.836309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:39:52.836347 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 00:39:52.83634083 +0000 UTC m=+648.482193894 I0408 00:39:52.836691 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 00:39:52.836686314 +0000 UTC m=+648.482539378 I0408 00:39:52.863751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:52.863826 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 00:39:52.863817538 +0000 UTC m=+648.509670632 I0408 00:39:53.014068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:53.106655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jcb65" condition "Approved" to 2026-04-08 00:39:53.106641922 +0000 UTC m=+648.752495006 I0408 00:39:53.133887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jcb65" condition "Ready" to 2026-04-08 00:39:53.133876447 +0000 UTC m=+648.779729521 I0408 00:39:53.161797 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:39:53.161784689 +0000 UTC m=+648.807637753 I0408 00:39:53.181081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:53.181698 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:39:53.181691905 +0000 UTC m=+648.827544969 I0408 00:39:53.206299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:39:53.206353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"