I0406 17:02:28.283742 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0406 17:02:28.283851 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0406 17:02:28.283921 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0406 17:02:28.286882 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0406 17:02:28.287296 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0406 17:02:28.287308 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0406 17:02:28.287439 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0406 17:02:28.290089 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0406 17:02:28.312513 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0406 17:02:28.315941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0406 17:02:28.322093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0406 17:02:28.324435 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0406 17:02:28.326282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0406 17:02:28.328022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0406 17:02:28.329981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0406 17:02:28.335564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0406 17:02:28.337113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0406 17:02:28.343306 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0406 17:02:28.343541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0406 17:02:28.346503 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0406 17:02:28.346607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0406 17:02:28.349127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0406 17:02:28.349155 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0406 17:02:28.349180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0406 17:02:28.352184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0406 17:02:28.354396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0406 17:02:28.356427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0406 17:02:28.358316 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0406 17:02:28.358334 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0406 17:02:28.358434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0406 17:02:28.360259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0406 17:02:28.366950 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0406 17:02:28.370879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0406 17:02:28.373830 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.373985 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.375169 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.391598 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.415018 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.437884 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.437903 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.456250 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.463347 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:28.471639 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:02:40.618060 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-06 17:02:40.618037594 +0000 UTC m=+12.365369795 I0406 17:02:41.410920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:02:41.411048 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 17:02:41.411037987 +0000 UTC m=+13.158370188 I0406 17:02:41.411447 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 17:02:41.411437565 +0000 UTC m=+13.158769806 E0406 17:02:41.426190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:02:41.426238 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-06 17:02:41.426232678 +0000 UTC m=+13.173564849 E0406 17:02:41.426257 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:02:41.432122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:02:41.432163 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 17:02:41.432157998 +0000 UTC m=+13.179490169 E0406 17:02:41.441494 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0406 17:02:41.441578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:02:41.441612 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:02:41.441991 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0406 17:02:41.448780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:02:41.448949 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 17:02:41.448907687 +0000 UTC m=+13.196239898 I0406 17:02:41.451782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vcn8t" condition "Approved" to 2026-04-06 17:02:41.45177233 +0000 UTC m=+13.199104541 I0406 17:02:41.460857 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 17:02:41.460849058 +0000 UTC m=+13.208181249 I0406 17:02:41.463646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vcn8t" condition "Ready" to 2026-04-06 17:02:41.463634379 +0000 UTC m=+13.210966560 I0406 17:02:41.467108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:02:41.482024 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:02:41.482010248 +0000 UTC m=+13.229342459 I0406 17:02:41.502905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:02:41.552286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:02:46.442263 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:02:46.442219964 +0000 UTC m=+18.189552165 I0406 17:03:08.609170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:03:08.609209 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 17:03:08.609197155 +0000 UTC m=+40.356529336 I0406 17:03:08.609372 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 17:03:08.609355088 +0000 UTC m=+40.356687279 I0406 17:03:08.623428 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-06 17:03:08.623417198 +0000 UTC m=+40.370749369 I0406 17:03:08.639858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:03:08.639937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:03:08.640011 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 17:03:08.64000367 +0000 UTC m=+40.387335841 I0406 17:03:08.819394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2z57h" condition "Approved" to 2026-04-06 17:03:08.819383892 +0000 UTC m=+40.566716073 I0406 17:03:08.850417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2z57h" condition "Ready" to 2026-04-06 17:03:08.850389481 +0000 UTC m=+40.597721692 I0406 17:03:08.881577 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:03:08.881562652 +0000 UTC m=+40.628894853 I0406 17:03:08.901964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:03:08.902605 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:03:08.902597287 +0000 UTC m=+40.649929458 I0406 17:03:08.916102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:03:08.925684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:07:41.813762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-04-06 17:07:41.813721341 +0000 UTC m=+313.561053542 I0406 17:07:41.814048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-3.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:07:41.814099 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Issuing" to 2026-04-06 17:07:41.814091958 +0000 UTC m=+313.561424139 I0406 17:07:41.828741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:07:41.829025 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-04-06 17:07:41.829015697 +0000 UTC m=+313.576347868 I0406 17:07:41.962065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:07:41.987683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-nsw58" condition "Approved" to 2026-04-06 17:07:41.987670813 +0000 UTC m=+313.735003004 I0406 17:07:42.008929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-nsw58" condition "Ready" to 2026-04-06 17:07:42.008915263 +0000 UTC m=+313.756247434 I0406 17:07:42.046165 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:07:42.046152573 +0000 UTC m=+313.793484764 I0406 17:07:42.065189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:07:42.065691 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:07:42.065685737 +0000 UTC m=+313.813017908 I0406 17:07:42.083833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:45.770868 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 17:08:45.770830717 +0000 UTC m=+377.518162928 I0406 17:08:45.771046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:08:45.771154 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-06 17:08:45.771117863 +0000 UTC m=+377.518450064 E0406 17:08:45.781322 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:08:45.781358 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-06 17:08:45.781350574 +0000 UTC m=+377.528682765 E0406 17:08:45.781439 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:08:45.786603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:45.786662 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 17:08:45.786655763 +0000 UTC m=+377.533987934 E0406 17:08:45.788686 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0406 17:08:45.788734 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:08:45.788757 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:08:45.788789 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0406 17:08:45.801198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:45.820994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-65gdn" condition "Approved" to 2026-04-06 17:08:45.820980843 +0000 UTC m=+377.568313024 I0406 17:08:45.831500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-65gdn" condition "Ready" to 2026-04-06 17:08:45.831490869 +0000 UTC m=+377.578823040 I0406 17:08:45.849489 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:45.849477305 +0000 UTC m=+377.596809496 I0406 17:08:45.865290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:45.865488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:45.865476813 +0000 UTC m=+377.612809014 I0406 17:08:45.879557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:45.879790 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:45.879782061 +0000 UTC m=+377.627114242 I0406 17:08:50.789242 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:50.7892311 +0000 UTC m=+382.536563281 I0406 17:09:30.559644 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-06 17:09:30.559602098 +0000 UTC m=+422.306934279 I0406 17:09:30.560331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.560356 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 17:09:30.560352462 +0000 UTC m=+422.307684633 I0406 17:09:30.561174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.561217 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 17:09:30.561190907 +0000 UTC m=+422.308523078 I0406 17:09:30.561731 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-06 17:09:30.561726216 +0000 UTC m=+422.309058387 I0406 17:09:30.574590 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-06 17:09:30.574578404 +0000 UTC m=+422.321910575 I0406 17:09:30.575729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.575755 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 17:09:30.575750445 +0000 UTC m=+422.323082616 I0406 17:09:30.604647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:30.604712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.606301 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 17:09:30.604731419 +0000 UTC m=+422.352063600 I0406 17:09:30.607743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:30.607790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.607857 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 17:09:30.607850994 +0000 UTC m=+422.355183165 I0406 17:09:30.618638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:30.618714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:30.618969 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 17:09:30.618960591 +0000 UTC m=+422.366292782 I0406 17:09:30.871824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9kpws" condition "Approved" to 2026-04-06 17:09:30.871812112 +0000 UTC m=+422.619144283 I0406 17:09:30.890507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9kpws" condition "Ready" to 2026-04-06 17:09:30.890498803 +0000 UTC m=+422.637830974 I0406 17:09:30.932439 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:30.932426597 +0000 UTC m=+422.679758768 I0406 17:09:30.943952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8j4q7" condition "Approved" to 2026-04-06 17:09:30.943942151 +0000 UTC m=+422.691274322 I0406 17:09:30.961311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:30.976180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8j4q7" condition "Ready" to 2026-04-06 17:09:30.976168232 +0000 UTC m=+422.723500423 I0406 17:09:31.015056 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:31.015039221 +0000 UTC m=+422.762371402 I0406 17:09:31.038079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:31.238259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2kbff" condition "Approved" to 2026-04-06 17:09:31.238245363 +0000 UTC m=+422.985577564 E0406 17:09:31.284846 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-b2ldj\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0406 17:09:31.647506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2kbff" condition "Ready" to 2026-04-06 17:09:31.647496449 +0000 UTC m=+423.394828630 I0406 17:09:31.938315 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:31.938301458 +0000 UTC m=+423.685633639 I0406 17:09:31.988310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:32.087696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:32.088188 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:32.088181111 +0000 UTC m=+423.835513292 I0406 17:09:32.286150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:38.390983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:38.391033 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" condition "Issuing" to 2026-04-06 17:09:38.391015465 +0000 UTC m=+430.138347676 I0406 17:09:38.391383 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" condition "Ready" to 2026-04-06 17:09:38.391366351 +0000 UTC m=+430.138698512 I0406 17:09:38.472047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cdljj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:38.472131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" condition "Ready" to 2026-04-06 17:09:38.472123202 +0000 UTC m=+430.219455383 I0406 17:09:38.624491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cdljj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:38.666720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cdljj-525l5" condition "Approved" to 2026-04-06 17:09:38.666707364 +0000 UTC m=+430.414039555 I0406 17:09:38.687727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cdljj-525l5" condition "Ready" to 2026-04-06 17:09:38.687717453 +0000 UTC m=+430.435049624 I0406 17:09:38.720149 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:38.720135023 +0000 UTC m=+430.467467204 I0406 17:09:38.743063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cdljj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cdljj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:51.042496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:09:51.042560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 17:09:51.042549543 +0000 UTC m=+442.789881724 I0406 17:09:51.042512 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-06 17:09:51.042490162 +0000 UTC m=+442.789822343 I0406 17:09:51.057380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:51.057550 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-06 17:09:51.057540564 +0000 UTC m=+442.804872745 I0406 17:09:51.287731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:09:51.334105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-thchd" condition "Approved" to 2026-04-06 17:09:51.334088532 +0000 UTC m=+443.081420723 I0406 17:09:51.370096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-thchd" condition "Ready" to 2026-04-06 17:09:51.370080388 +0000 UTC m=+443.117412569 I0406 17:09:51.401359 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:09:51.401342972 +0000 UTC m=+443.148675153 I0406 17:09:51.419654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:11.294755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:13:11.294793 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-06 17:13:11.294778218 +0000 UTC m=+643.042110399 I0406 17:13:11.294996 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 17:13:11.294980946 +0000 UTC m=+643.042313217 I0406 17:13:11.310477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:11.310531 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 17:13:11.310524007 +0000 UTC m=+643.057856178 I0406 17:13:11.469388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:11.501950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pdqj6" condition "Approved" to 2026-04-06 17:13:11.501939245 +0000 UTC m=+643.249271416 I0406 17:13:11.523828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pdqj6" condition "Ready" to 2026-04-06 17:13:11.523812367 +0000 UTC m=+643.271144588 I0406 17:13:11.552053 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:13:11.55204147 +0000 UTC m=+643.299373641 I0406 17:13:11.574477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:11.574905 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:13:11.57489647 +0000 UTC m=+643.322228651 I0406 17:13:11.596552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.474122 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-06 17:13:52.474104032 +0000 UTC m=+684.221436213 I0406 17:13:52.474373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:13:52.474407 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-06 17:13:52.474399653 +0000 UTC m=+684.221731824 I0406 17:13:52.489135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.489191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:13:52.489207 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-06 17:13:52.489201152 +0000 UTC m=+684.236533323 I0406 17:13:52.805565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.816961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vtvwr" condition "Approved" to 2026-04-06 17:13:52.816948697 +0000 UTC m=+684.564280868 I0406 17:13:52.915598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vtvwr" condition "Ready" to 2026-04-06 17:13:52.915589617 +0000 UTC m=+684.662921788 I0406 17:13:52.950604 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:13:52.950592474 +0000 UTC m=+684.697924655 I0406 17:13:52.974004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.975491 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:13:52.975475457 +0000 UTC m=+684.722807638 I0406 17:13:52.995733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.998465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:13:52.998981 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:13:52.998969141 +0000 UTC m=+684.746301342