I0403 02:52:30.093738 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0403 02:52:30.093926 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0403 02:52:30.094015 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0403 02:52:30.100617 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0403 02:52:30.101131 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0403 02:52:30.101204 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0403 02:52:30.101297 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0403 02:52:30.105307 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0403 02:52:30.178629 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0403 02:52:30.184062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0403 02:52:30.187128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0403 02:52:30.191756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0403 02:52:30.196236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0403 02:52:30.199478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0403 02:52:30.201153 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0403 02:52:30.201174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0403 02:52:30.201181 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0403 02:52:30.201187 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0403 02:52:30.201193 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0403 02:52:30.201247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0403 02:52:30.203108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0403 02:52:30.205008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0403 02:52:30.206839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0403 02:52:30.208883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0403 02:52:30.212553 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0403 02:52:30.212764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0403 02:52:30.215374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0403 02:52:30.217817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0403 02:52:30.219728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0403 02:52:30.221382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0403 02:52:30.223065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0403 02:52:30.224843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0403 02:52:30.227118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0403 02:52:30.228879 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.232447 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.232513 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.311933 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.538041 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.539277 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.539302 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.539717 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.539985 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:30.541159 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:52:48.254101 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-03 02:52:48.254088715 +0000 UTC m=+18.189294276 I0403 02:52:49.008062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:52:49.008148 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 02:52:49.008140458 +0000 UTC m=+18.943346039 I0403 02:52:49.008873 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:52:49.00886771 +0000 UTC m=+18.944073271 E0403 02:52:49.024216 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:52:49.024310 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-03 02:52:49.024257934 +0000 UTC m=+18.959463495 E0403 02:52:49.024335 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:52:49.029816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:52:49.029977 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:52:49.029943528 +0000 UTC m=+18.965149079 E0403 02:52:49.042279 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0403 02:52:49.042618 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:52:49.042758 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:52:49.042854 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0403 02:52:49.049025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:52:49.049104 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:52:49.049094336 +0000 UTC m=+18.984299917 I0403 02:52:49.052624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zkrp9" condition "Approved" to 2026-04-03 02:52:49.052612975 +0000 UTC m=+18.987818516 I0403 02:52:49.061695 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:52:49.061683254 +0000 UTC m=+18.996888815 I0403 02:52:49.068797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zkrp9" condition "Ready" to 2026-04-03 02:52:49.068785362 +0000 UTC m=+19.003990923 I0403 02:52:49.070525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:52:49.092748 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:52:49.092728437 +0000 UTC m=+19.027934018 I0403 02:52:49.113744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:52:54.043895 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:52:54.043872748 +0000 UTC m=+23.979078329 I0403 02:53:20.344419 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 02:53:20.344390836 +0000 UTC m=+50.279596397 I0403 02:53:20.345012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:53:20.345771 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 02:53:20.345745901 +0000 UTC m=+50.280951532 I0403 02:53:20.358334 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-03 02:53:20.358321376 +0000 UTC m=+50.293526927 I0403 02:53:20.367361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:53:20.367513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 02:53:20.367501926 +0000 UTC m=+50.302707487 I0403 02:53:21.013603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:53:21.047449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dxlm7" condition "Approved" to 2026-04-03 02:53:21.047435744 +0000 UTC m=+50.982641305 I0403 02:53:21.073316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dxlm7" condition "Ready" to 2026-04-03 02:53:21.073302279 +0000 UTC m=+51.008507840 I0403 02:53:21.107340 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:53:21.107322508 +0000 UTC m=+51.042528069 I0403 02:53:21.137445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:53:21.187850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:58:57.614976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:58:57.615051 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-04-03 02:58:57.615041953 +0000 UTC m=+387.550247514 I0403 02:58:57.615070 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready" to 2026-04-03 02:58:57.614362569 +0000 UTC m=+387.549568160 I0403 02:58:57.634074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:58:57.634173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:58:57.634193 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-04-03 02:58:57.634185936 +0000 UTC m=+387.569391497 I0403 02:58:57.830709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:58:57.838286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-lkj4m" condition "Approved" to 2026-04-03 02:58:57.83826885 +0000 UTC m=+387.773474431 I0403 02:58:57.878145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-lkj4m" condition "Ready" to 2026-04-03 02:58:57.878120449 +0000 UTC m=+387.813326040 I0403 02:58:57.910033 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:58:57.910016353 +0000 UTC m=+387.845221914 I0403 02:58:57.932341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:04.381894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:04.381996 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 03:00:04.381988316 +0000 UTC m=+454.317193897 I0403 03:00:04.381894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 03:00:04.381842423 +0000 UTC m=+454.317047994 E0403 03:00:04.395321 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 03:00:04.395412 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-03 03:00:04.39540223 +0000 UTC m=+454.330607821 E0403 03:00:04.395446 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 03:00:04.396006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:04.396067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:04.396320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 03:00:04.396313109 +0000 UTC m=+454.331518690 E0403 03:00:04.409655 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0403 03:00:04.411083 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 03:00:04.411127 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 03:00:04.411193 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0403 03:00:04.439460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fj4nd" condition "Approved" to 2026-04-03 03:00:04.439442012 +0000 UTC m=+454.374647583 I0403 03:00:04.452662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fj4nd" condition "Ready" to 2026-04-03 03:00:04.452646463 +0000 UTC m=+454.387852034 I0403 03:00:04.473951 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:04.473934558 +0000 UTC m=+454.409140119 I0403 03:00:04.491109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:09.410400 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:09.410377922 +0000 UTC m=+459.345583503 I0403 03:00:55.863198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:55.863276 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-03 03:00:55.863270021 +0000 UTC m=+505.798475572 I0403 03:00:55.864031 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 03:00:55.864026786 +0000 UTC m=+505.799232337 I0403 03:00:55.864606 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 03:00:55.864601987 +0000 UTC m=+505.799807538 I0403 03:00:55.866188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:55.867154 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 03:00:55.867147917 +0000 UTC m=+505.802353468 I0403 03:00:55.869178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:55.869267 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 03:00:55.869256269 +0000 UTC m=+505.804461820 I0403 03:00:55.869798 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 03:00:55.86978991 +0000 UTC m=+505.804995461 I0403 03:00:55.906982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:55.907096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:00:55.907146 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 03:00:55.907136156 +0000 UTC m=+505.842341717 I0403 03:00:55.911364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:55.913013 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 03:00:55.913001041 +0000 UTC m=+505.848206632 I0403 03:00:55.920379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:55.923644 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 03:00:55.92360276 +0000 UTC m=+505.858808391 I0403 03:00:56.192644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:56.248529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:56.306303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-84std" condition "Approved" to 2026-04-03 03:00:56.306280492 +0000 UTC m=+506.241486063 I0403 03:00:56.333119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-84std" condition "Ready" to 2026-04-03 03:00:56.333109441 +0000 UTC m=+506.268314992 I0403 03:00:56.406566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fnxnf" condition "Approved" to 2026-04-03 03:00:56.406544858 +0000 UTC m=+506.341750409 I0403 03:00:56.435420 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:56.435394396 +0000 UTC m=+506.370599957 I0403 03:00:56.442814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fnxnf" condition "Ready" to 2026-04-03 03:00:56.442801683 +0000 UTC m=+506.378007224 I0403 03:00:56.469632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4zvsn" condition "Approved" to 2026-04-03 03:00:56.469619531 +0000 UTC m=+506.404825072 I0403 03:00:56.476771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0403 03:00:56.476805 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-zd5j8\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0403 03:00:56.477029 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:56.477025016 +0000 UTC m=+506.412230557 I0403 03:00:56.540768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4zvsn" condition "Ready" to 2026-04-03 03:00:56.540756652 +0000 UTC m=+506.475962203 I0403 03:00:56.936227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:56.938517 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:56.938506609 +0000 UTC m=+506.873712170 I0403 03:00:56.938706 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:56.938701443 +0000 UTC m=+506.873907004 I0403 03:00:57.120862 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-4zvsn" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-qqm8m" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0403 03:00:57.249288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:57.249953 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:57.249944843 +0000 UTC m=+507.185150394 I0403 03:00:57.589692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2j8zv" condition "Approved" to 2026-04-03 03:00:57.589669244 +0000 UTC m=+507.524874835 I0403 03:00:57.630796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:57.848837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2j8zv" condition "Ready" to 2026-04-03 03:00:57.848817807 +0000 UTC m=+507.784023358 I0403 03:00:58.334265 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:58.334226262 +0000 UTC m=+508.269431823 I0403 03:00:58.356722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:58.357302 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:00:58.357290567 +0000 UTC m=+508.292496158 I0403 03:00:58.582384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:00:58.630576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:07.567903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hm727-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:01:07.567965 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hm727-tls" condition "Issuing" to 2026-04-03 03:01:07.567952195 +0000 UTC m=+517.503157756 I0403 03:01:07.568126 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hm727-tls" condition "Ready" to 2026-04-03 03:01:07.568073957 +0000 UTC m=+517.503279548 I0403 03:01:07.582220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hm727-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hm727-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:07.582318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hm727-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:01:07.582349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hm727-tls" condition "Issuing" to 2026-04-03 03:01:07.582340726 +0000 UTC m=+517.517546287 I0403 03:01:08.282924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hm727-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hm727-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:08.317405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hm727-4p7g5" condition "Approved" to 2026-04-03 03:01:08.317389724 +0000 UTC m=+518.252595285 I0403 03:01:08.387017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hm727-4p7g5" condition "Ready" to 2026-04-03 03:01:08.386998886 +0000 UTC m=+518.322204477 I0403 03:01:08.748446 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hm727-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:01:08.748428918 +0000 UTC m=+518.683634479 I0403 03:01:08.776504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hm727-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hm727-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:25.169229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:01:25.169297 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 03:01:25.169279712 +0000 UTC m=+535.104485303 I0403 03:01:25.169319 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-03 03:01:25.169292352 +0000 UTC m=+535.104497913 I0403 03:01:25.204911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:25.205166 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-03 03:01:25.205152127 +0000 UTC m=+535.140357718 I0403 03:01:25.359578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:25.409661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5wlb" condition "Approved" to 2026-04-03 03:01:25.409644653 +0000 UTC m=+535.344850204 I0403 03:01:25.435015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5wlb" condition "Ready" to 2026-04-03 03:01:25.435003946 +0000 UTC m=+535.370209497 I0403 03:01:25.469691 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:01:25.469673128 +0000 UTC m=+535.404878689 I0403 03:01:25.486317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:01:25.486585 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:01:25.486578616 +0000 UTC m=+535.421784177 I0403 03:01:25.514792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:04:51.934153 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 03:04:51.934112228 +0000 UTC m=+741.869317809 I0403 03:04:51.934726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:04:51.934844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 03:04:51.934832313 +0000 UTC m=+741.870037894 I0403 03:04:51.952277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:04:51.952342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:04:51.952360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 03:04:51.95235522 +0000 UTC m=+741.887560771 I0403 03:04:52.126201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5kqz" condition "Approved" to 2026-04-03 03:04:52.126181889 +0000 UTC m=+742.061387440 I0403 03:04:52.153619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5kqz" condition "Ready" to 2026-04-03 03:04:52.153605234 +0000 UTC m=+742.088810795 I0403 03:04:52.185752 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:04:52.185734849 +0000 UTC m=+742.120940400 I0403 03:04:52.215298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:04:52.215679 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:04:52.215669555 +0000 UTC m=+742.150875116 I0403 03:04:52.239351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:04:52.239619 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:04:52.239610333 +0000 UTC m=+742.174815874 I0403 03:05:40.119306 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-03 03:05:40.119279632 +0000 UTC m=+790.054485213 I0403 03:05:40.120019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 03:05:40.120095 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-03 03:05:40.120088369 +0000 UTC m=+790.055293950 I0403 03:05:40.472157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:05:40.472288 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-03 03:05:40.472252995 +0000 UTC m=+790.407458556 I0403 03:05:41.071875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 03:05:41.280763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6lf4f" condition "Approved" to 2026-04-03 03:05:41.280753136 +0000 UTC m=+791.215958697 I0403 03:05:41.806893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6lf4f" condition "Ready" to 2026-04-03 03:05:41.806884091 +0000 UTC m=+791.742089642 I0403 03:05:41.986607 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 03:05:41.98657986 +0000 UTC m=+791.921785421 I0403 03:05:42.312830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"