I0407 01:20:35.276920 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 01:20:35.277047 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 01:20:35.277149 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 01:20:35.282919 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 01:20:35.283311 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 01:20:35.283496 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 01:20:35.283713 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 01:20:35.288182 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 01:20:35.304394 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 01:20:35.304729 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 01:20:35.310326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 01:20:35.312751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 01:20:35.315101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 01:20:35.317785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 01:20:35.322700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 01:20:35.325161 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 01:20:35.325272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 01:20:35.327764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 01:20:35.330402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 01:20:35.332668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 01:20:35.334367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 01:20:35.336331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 01:20:35.342024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 01:20:35.346897 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 01:20:35.346980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 01:20:35.350813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 01:20:35.352573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 01:20:35.354108 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 01:20:35.354123 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 01:20:35.354131 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 01:20:35.354131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 01:20:35.355992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 01:20:35.357858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 01:20:35.363023 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.363218 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.363485 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.363759 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.363786 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.364119 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.364136 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.364397 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.365358 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:35.446935 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:20:47.709619 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 01:20:47.709604913 +0000 UTC m=+12.464557904 I0407 01:20:48.556221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:20:48.556299 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:20:48.556288424 +0000 UTC m=+13.311241455 I0407 01:20:48.556462 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:20:48.556448178 +0000 UTC m=+13.311401179 E0407 01:20:48.570677 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:20:48.570730 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 01:20:48.570722506 +0000 UTC m=+13.325675497 E0407 01:20:48.570751 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:20:48.574483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:20:48.574581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:20:48.574614 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:20:48.574605324 +0000 UTC m=+13.329558335 E0407 01:20:48.583752 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 01:20:48.583972 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:20:48.584076 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:20:48.584149 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 01:20:48.609026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:20:48.615704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rsdds" condition "Approved" to 2026-04-07 01:20:48.615693304 +0000 UTC m=+13.370646305 I0407 01:20:48.627569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rsdds" condition "Ready" to 2026-04-07 01:20:48.627559532 +0000 UTC m=+13.382512523 I0407 01:20:48.650602 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:20:48.650583859 +0000 UTC m=+13.405536890 I0407 01:20:48.670445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:20:53.584960 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:20:53.584945999 +0000 UTC m=+18.339899030 I0407 01:21:15.477000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:21:15.476942931 +0000 UTC m=+40.231895962 I0407 01:21:15.477093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:21:15.477147 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:21:15.477137975 +0000 UTC m=+40.232090976 I0407 01:21:15.496476 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 01:21:15.496464623 +0000 UTC m=+40.251417614 I0407 01:21:15.506075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:15.506157 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:21:15.506151702 +0000 UTC m=+40.261104693 I0407 01:21:15.687148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:15.719689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4c8nl" condition "Approved" to 2026-04-07 01:21:15.719679018 +0000 UTC m=+40.474632019 I0407 01:21:15.750852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4c8nl" condition "Ready" to 2026-04-07 01:21:15.750839609 +0000 UTC m=+40.505792610 I0407 01:21:15.784634 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:21:15.784621699 +0000 UTC m=+40.539574700 I0407 01:21:15.809727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:15.809986 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:21:15.809981965 +0000 UTC m=+40.564934956 I0407 01:21:15.831473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:22.199012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:25:22.199225 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-07 01:25:22.199216154 +0000 UTC m=+286.954169175 I0407 01:25:22.199734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-07 01:25:22.199728157 +0000 UTC m=+286.954681158 I0407 01:25:22.218180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:22.218473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-07 01:25:22.218432827 +0000 UTC m=+286.973385858 I0407 01:25:22.390497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:22.420186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-6kfqd" condition "Approved" to 2026-04-07 01:25:22.420174769 +0000 UTC m=+287.175127770 I0407 01:25:22.448117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-6kfqd" condition "Ready" to 2026-04-07 01:25:22.448105364 +0000 UTC m=+287.203058375 I0407 01:25:22.479828 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:25:22.47981384 +0000 UTC m=+287.234766841 I0407 01:25:22.499351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:22.550528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:26.170408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:26:26.170463 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:26:26.170453611 +0000 UTC m=+350.925406642 I0407 01:26:26.170560 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:26:26.170473921 +0000 UTC m=+350.925426942 E0407 01:26:26.190409 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:26:26.190483 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 01:26:26.190471807 +0000 UTC m=+350.945424838 E0407 01:26:26.190562 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:26:26.194831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:26.194908 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:26:26.194900239 +0000 UTC m=+350.949853240 E0407 01:26:26.241121 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 01:26:26.241207 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:26:26.241235 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:26:26.241268 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 01:26:26.243815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:26.294744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4gjbq" condition "Approved" to 2026-04-07 01:26:26.294733972 +0000 UTC m=+351.049686973 I0407 01:26:26.313000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4gjbq" condition "Ready" to 2026-04-07 01:26:26.312984481 +0000 UTC m=+351.067937512 I0407 01:26:26.338158 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:26:26.338142624 +0000 UTC m=+351.093095655 I0407 01:26:26.355316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:26.355855 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:26:26.355845461 +0000 UTC m=+351.110798462 I0407 01:26:26.370029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:26.371445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:31.241636 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:26:31.241618818 +0000 UTC m=+355.996571839 I0407 01:27:10.495792 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:27:10.495744635 +0000 UTC m=+395.250697636 I0407 01:27:10.496130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:10.496150 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:27:10.496146362 +0000 UTC m=+395.251099363 I0407 01:27:10.516744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:10.516790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:27:10.516781476 +0000 UTC m=+395.271734477 I0407 01:27:10.517173 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 01:27:10.516668594 +0000 UTC m=+395.271621585 I0407 01:27:10.524039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:10.524087 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:27:10.524082108 +0000 UTC m=+395.279035099 I0407 01:27:10.524438 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:27:10.524418825 +0000 UTC m=+395.279371846 I0407 01:27:10.550067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:10.550208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:10.550237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:10.550233 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:27:10.550227462 +0000 UTC m=+395.305180453 I0407 01:27:10.550306 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:27:10.550298853 +0000 UTC m=+395.305251854 I0407 01:27:10.563716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:10.563778 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:27:10.563771698 +0000 UTC m=+395.318724689 I0407 01:27:10.729071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vwhcm" condition "Approved" to 2026-04-07 01:27:10.729052083 +0000 UTC m=+395.484005084 I0407 01:27:10.743566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:10.750109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vwhcm" condition "Ready" to 2026-04-07 01:27:10.750099844 +0000 UTC m=+395.505052835 I0407 01:27:10.751415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:10.800874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h7qr4" condition "Approved" to 2026-04-07 01:27:10.800859613 +0000 UTC m=+395.555812614 I0407 01:27:10.818694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jssmg" condition "Approved" to 2026-04-07 01:27:10.818684007 +0000 UTC m=+395.573636998 I0407 01:27:10.822525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h7qr4" condition "Ready" to 2026-04-07 01:27:10.822491835 +0000 UTC m=+395.577444826 I0407 01:27:10.831625 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:10.831062021 +0000 UTC m=+395.586015012 I0407 01:27:10.838329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jssmg" condition "Ready" to 2026-04-07 01:27:10.838315812 +0000 UTC m=+395.593268813 I0407 01:27:11.079365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:11.079798 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:11.079791414 +0000 UTC m=+395.834744425 I0407 01:27:11.334206 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:11.334193292 +0000 UTC m=+396.089146283 I0407 01:27:11.523532 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:11.523513282 +0000 UTC m=+396.278466313 I0407 01:27:11.528540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:11.631698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:11.632045 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:11.632037194 +0000 UTC m=+396.386990195 I0407 01:27:11.735236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:11.735526 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:11.735520574 +0000 UTC m=+396.490473565 I0407 01:27:12.079899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:12.178678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:18.219853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:18.219856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" condition "Ready" to 2026-04-07 01:27:18.219836176 +0000 UTC m=+402.974789187 I0407 01:27:18.219895 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" condition "Issuing" to 2026-04-07 01:27:18.219882987 +0000 UTC m=+402.974836008 I0407 01:27:18.235204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-shkwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:18.235279 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" condition "Ready" to 2026-04-07 01:27:18.23527251 +0000 UTC m=+402.990225491 I0407 01:27:18.481302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-shkwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:18.510245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-shkwz-s5p9x" condition "Approved" to 2026-04-07 01:27:18.510231725 +0000 UTC m=+403.265184706 I0407 01:27:18.530197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-shkwz-s5p9x" condition "Ready" to 2026-04-07 01:27:18.530185568 +0000 UTC m=+403.285138569 I0407 01:27:18.556888 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:18.556877162 +0000 UTC m=+403.311830153 I0407 01:27:18.576700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-shkwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-shkwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:29.883108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:29.883182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:27:29.883170765 +0000 UTC m=+414.638123766 I0407 01:27:29.883827 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 01:27:29.883819715 +0000 UTC m=+414.638772716 I0407 01:27:29.960503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:29.960558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:29.960570 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:27:29.960564328 +0000 UTC m=+414.715517319 I0407 01:27:30.148534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x24qz" condition "Approved" to 2026-04-07 01:27:30.148514751 +0000 UTC m=+414.903467752 I0407 01:27:30.169170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x24qz" condition "Ready" to 2026-04-07 01:27:30.169162656 +0000 UTC m=+414.924115657 I0407 01:27:30.208221 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:30.208204827 +0000 UTC m=+414.963157818 I0407 01:27:30.226892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:30:39.219772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:30:39.219799 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:30:39.219793188 +0000 UTC m=+603.974746179 I0407 01:30:39.219909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 01:30:39.219887569 +0000 UTC m=+603.974840600 I0407 01:30:39.236213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:30:39.236328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:30:39.236352 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:30:39.236345142 +0000 UTC m=+603.991298143 I0407 01:30:39.507916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2bqdp" condition "Approved" to 2026-04-07 01:30:39.507895968 +0000 UTC m=+604.262848959 I0407 01:30:39.529654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2bqdp" condition "Ready" to 2026-04-07 01:30:39.529643629 +0000 UTC m=+604.284596630 I0407 01:30:39.556032 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:30:39.556018281 +0000 UTC m=+604.310971302 I0407 01:30:39.577161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"