I0428 13:53:52.728116 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 13:53:52.728233 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 13:53:52.728362 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 13:53:52.731649 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 13:53:52.732102 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 13:53:52.732282 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 13:53:52.732307 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 13:53:52.734566 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 13:53:52.983193 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 13:53:52.986714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 13:53:52.989684 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 13:53:52.991312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 13:53:52.994312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 13:53:52.997249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 13:53:52.999328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 13:53:53.001166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 13:53:53.003443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 13:53:53.005266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 13:53:53.008549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 13:53:53.013129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 13:53:53.017639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 13:53:53.020464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 13:53:53.020495 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 13:53:53.020503 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 13:53:53.020512 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 13:53:53.020559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 13:53:53.022430 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 13:53:53.022465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 13:53:53.024776 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 13:53:53.026677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 13:53:53.028602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 13:53:53.030848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 13:53:53.034720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 13:53:53.038913 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.039973 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.040644 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.040728 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.040865 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.040930 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.041080 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.041113 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.042039 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:53:53.124048 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:54:21.698945 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 13:54:21.698911019 +0000 UTC m=+29.007012599 I0428 13:54:22.456712 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 13:54:22.45669565 +0000 UTC m=+29.764797190 I0428 13:54:22.457515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:22.457536 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:54:22.457533196 +0000 UTC m=+29.765634736 E0428 13:54:22.674148 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:54:22.674286 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 13:54:22.674274632 +0000 UTC m=+29.982376202 E0428 13:54:22.674326 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:54:22.677535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:22.677616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:22.677653 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:54:22.677644708 +0000 UTC m=+29.985746288 E0428 13:54:22.916020 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 13:54:22.916123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:22.916155 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:22.916197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 13:54:23.361886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:23.532896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8w8n2" condition "Approved" to 2026-04-28 13:54:23.5328831 +0000 UTC m=+30.840984650 I0428 13:54:23.660269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8w8n2" condition "Ready" to 2026-04-28 13:54:23.660255197 +0000 UTC m=+30.968356747 I0428 13:54:24.305032 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:24.30501725 +0000 UTC m=+31.613118790 I0428 13:54:25.014034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:27.917154 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:27.91713029 +0000 UTC m=+35.225231870 I0428 13:55:42.884928 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 13:55:42.884896123 +0000 UTC m=+110.192997713 I0428 13:55:42.887107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:42.887176 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:55:42.887168527 +0000 UTC m=+110.195270077 I0428 13:55:42.930775 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 13:55:42.930760228 +0000 UTC m=+110.238861808 I0428 13:55:42.934367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:42.934429 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:42.934875 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:55:42.934865586 +0000 UTC m=+110.242967146 I0428 13:55:45.027747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8z2cs" condition "Approved" to 2026-04-28 13:55:45.027735716 +0000 UTC m=+112.335837256 I0428 13:55:45.145743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8z2cs" condition "Ready" to 2026-04-28 13:55:45.145726189 +0000 UTC m=+112.453827739 I0428 13:55:45.232597 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:45.232580818 +0000 UTC m=+112.540682368 I0428 13:55:45.284826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:45.285242 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:45.285234246 +0000 UTC m=+112.593335806 I0428 13:55:45.328954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:45.332901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" E0428 13:56:04.874949 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0428 14:07:08.175496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-146.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:07:08.175482 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready" to 2026-04-28 14:07:08.175449092 +0000 UTC m=+795.483550632 I0428 14:07:08.175530 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Issuing" to 2026-04-28 14:07:08.175522934 +0000 UTC m=+795.483624484 I0428 14:07:08.193219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:07:08.193728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-146.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:07:08.193753 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Issuing" to 2026-04-28 14:07:08.193747064 +0000 UTC m=+795.501848604 I0428 14:07:08.605372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-146.nip.io-tls-pp246" condition "Approved" to 2026-04-28 14:07:08.605361846 +0000 UTC m=+795.913463386 I0428 14:07:08.643581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-146.nip.io-tls-pp246" condition "Ready" to 2026-04-28 14:07:08.643525746 +0000 UTC m=+795.951627326 I0428 14:07:08.675105 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:07:08.67508629 +0000 UTC m=+795.983187870 I0428 14:07:08.697186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:07:08.697734 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:07:08.697725178 +0000 UTC m=+796.005826758 I0428 14:07:08.899969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:08:16.941771 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 14:08:16.941731424 +0000 UTC m=+864.249832974 I0428 14:08:16.941884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:08:16.941953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 14:08:16.941944218 +0000 UTC m=+864.250045768 E0428 14:08:16.988694 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 14:08:16.988762 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 14:08:16.988754485 +0000 UTC m=+864.296856025 E0428 14:08:16.988786 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 14:08:16.993939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:08:16.994034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:08:16.994066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 14:08:16.994056093 +0000 UTC m=+864.302157673 E0428 14:08:17.004825 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 14:08:17.004911 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 14:08:17.004937 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 14:08:17.004972 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 14:08:18.040962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9b8k9" condition "Approved" to 2026-04-28 14:08:18.040945606 +0000 UTC m=+865.349047176 I0428 14:08:18.224733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9b8k9" condition "Ready" to 2026-04-28 14:08:18.224723266 +0000 UTC m=+865.532824806 I0428 14:08:18.564633 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:08:18.564617426 +0000 UTC m=+865.872718976 I0428 14:08:18.677752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:08:18.678172 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:08:18.678164719 +0000 UTC m=+865.986266269 I0428 14:08:18.759821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:08:22.005966 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:08:22.005951135 +0000 UTC m=+869.314052705 I0428 14:09:16.223236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:09:16.223317 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 14:09:16.223292198 +0000 UTC m=+923.531393738 I0428 14:09:16.224026 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 14:09:16.224013131 +0000 UTC m=+923.532114681 I0428 14:09:16.224493 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 14:09:16.22448784 +0000 UTC m=+923.532589390 I0428 14:09:16.224900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:09:16.224924 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 14:09:16.224919238 +0000 UTC m=+923.533020788 I0428 14:09:16.225190 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 14:09:16.225185403 +0000 UTC m=+923.533286953 I0428 14:09:16.225382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:09:16.225400 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 14:09:16.225396118 +0000 UTC m=+923.533497668 I0428 14:09:16.392657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:16.392717 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 14:09:16.39271235 +0000 UTC m=+923.700813890 I0428 14:09:16.392934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:16.394092 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 14:09:16.394088346 +0000 UTC m=+923.702189886 I0428 14:09:16.394591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:16.394630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:09:16.394644 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 14:09:16.394641006 +0000 UTC m=+923.702742536 I0428 14:09:17.290163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:17.294529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:17.904707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-znwxq" condition "Approved" to 2026-04-28 14:09:17.904691821 +0000 UTC m=+925.212793371 I0428 14:09:17.905503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r8cw7" condition "Approved" to 2026-04-28 14:09:17.905492896 +0000 UTC m=+925.213594446 I0428 14:09:18.013576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-znwxq" condition "Ready" to 2026-04-28 14:09:18.01356697 +0000 UTC m=+925.321668500 I0428 14:09:18.014182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r8cw7" condition "Ready" to 2026-04-28 14:09:18.014167421 +0000 UTC m=+925.322268991 I0428 14:09:18.019613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vz74r" condition "Approved" to 2026-04-28 14:09:18.019601394 +0000 UTC m=+925.327702934 I0428 14:09:18.251642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vz74r" condition "Ready" to 2026-04-28 14:09:18.251628249 +0000 UTC m=+925.559729819 I0428 14:09:18.432288 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:18.432277268 +0000 UTC m=+925.740378808 I0428 14:09:18.447168 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:18.447158101 +0000 UTC m=+925.755259651 I0428 14:09:18.568598 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:18.568587036 +0000 UTC m=+925.876688576 I0428 14:09:18.584061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:18.585384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:18.586130 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:18.586117299 +0000 UTC m=+925.894218879 I0428 14:09:19.177117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:19.177478 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:19.177473022 +0000 UTC m=+926.485574562 I0428 14:09:19.517562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:19.802767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:20.282513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:20.863008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:50.548427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:09:50.548472 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" condition "Issuing" to 2026-04-28 14:09:50.548456905 +0000 UTC m=+957.856558455 I0428 14:09:50.548640 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" condition "Ready" to 2026-04-28 14:09:50.548617938 +0000 UTC m=+957.856719518 I0428 14:09:50.571182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:50.571297 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" condition "Ready" to 2026-04-28 14:09:50.571288146 +0000 UTC m=+957.879389706 I0428 14:09:51.316122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:52.148274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g2vnn-49z5p" condition "Approved" to 2026-04-28 14:09:52.148260802 +0000 UTC m=+959.456362342 I0428 14:09:52.191849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g2vnn-49z5p" condition "Ready" to 2026-04-28 14:09:52.19163809 +0000 UTC m=+959.499739650 I0428 14:09:52.233938 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:52.233903579 +0000 UTC m=+959.542005119 I0428 14:09:52.270682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:52.271131 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:09:52.271119715 +0000 UTC m=+959.579221275 I0428 14:09:52.280635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:09:52.303163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g2vnn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:10:26.474973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:10:26.475012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 14:10:26.474999839 +0000 UTC m=+993.783101379 I0428 14:10:26.475079 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 14:10:26.47506279 +0000 UTC m=+993.783164340 I0428 14:10:26.516153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:10:26.516266 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 14:10:26.516256378 +0000 UTC m=+993.824357938 I0428 14:10:26.860290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:10:26.959762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wkb59" condition "Approved" to 2026-04-28 14:10:26.959751678 +0000 UTC m=+994.267853208 I0428 14:10:26.993700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wkb59" condition "Ready" to 2026-04-28 14:10:26.993691526 +0000 UTC m=+994.301793056 I0428 14:10:27.058576 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:10:27.058565608 +0000 UTC m=+994.366667148 I0428 14:10:27.092481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:10:27.093021 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:10:27.093014374 +0000 UTC m=+994.401115924 I0428 14:10:27.107630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:10:27.131370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:13:45.566821 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 14:13:45.5668043 +0000 UTC m=+1192.874905860 I0428 14:13:45.566840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:13:45.567126 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 14:13:45.567117715 +0000 UTC m=+1192.875219265 I0428 14:13:45.594244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:13:45.594333 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 14:13:45.594323162 +0000 UTC m=+1192.902424732 I0428 14:13:45.885806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:13:45.922321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j65jj" condition "Approved" to 2026-04-28 14:13:45.922307334 +0000 UTC m=+1193.230408884 I0428 14:13:45.949226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j65jj" condition "Ready" to 2026-04-28 14:13:45.949210876 +0000 UTC m=+1193.257312446 I0428 14:13:45.983842 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:13:45.98381558 +0000 UTC m=+1193.291917130 I0428 14:13:46.006430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:13:46.006733 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:13:46.006728448 +0000 UTC m=+1193.314829988 I0428 14:13:46.035995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:15:40.562750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:15:40.562901 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 14:15:40.562893337 +0000 UTC m=+1307.870994897 I0428 14:15:40.563180 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 14:15:40.563173633 +0000 UTC m=+1307.871275173 I0428 14:15:40.592316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:15:40.592393 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 14:15:40.592383234 +0000 UTC m=+1307.900484794 I0428 14:15:41.142548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:15:41.192857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-m6r4f" condition "Approved" to 2026-04-28 14:15:41.192844929 +0000 UTC m=+1308.500946479 I0428 14:15:41.223222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-m6r4f" condition "Ready" to 2026-04-28 14:15:41.223210029 +0000 UTC m=+1308.531311579 I0428 14:15:41.302650 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:15:41.302636107 +0000 UTC m=+1308.610737647 I0428 14:15:41.330822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:15:41.332098 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:15:41.332086532 +0000 UTC m=+1308.640188092 I0428 14:15:41.625253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"