I0413 02:49:05.865011 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 02:49:05.865109 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 02:49:05.865195 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 02:49:05.869448 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 02:49:05.869812 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 02:49:05.869883 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 02:49:05.869893 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 02:49:05.872545 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 02:49:05.887448 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 02:49:05.892130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 02:49:05.900040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 02:49:05.902548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 02:49:05.904260 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 02:49:05.904363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 02:49:05.906234 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 02:49:05.908233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 02:49:05.910007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 02:49:05.911545 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 02:49:05.911565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 02:49:05.911983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 02:49:05.916822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 02:49:05.919485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 02:49:05.922725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 02:49:05.926035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 02:49:05.930310 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 02:49:05.934423 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 02:49:05.934500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 02:49:05.938105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 02:49:05.940702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 02:49:05.945121 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 02:49:05.945167 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 02:49:05.946096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 02:49:05.951086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 02:49:05.953140 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:05.953948 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:05.954280 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:05.971783 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:05.990087 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:06.002658 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:06.022580 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:06.031152 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:06.041742 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:06.046612 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 02:49:23.331851 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 02:49:23.33183526 +0000 UTC m=+17.494341370 I0413 02:49:24.156503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:49:24.156563 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 02:49:24.15655324 +0000 UTC m=+18.319059360 I0413 02:49:24.157482 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 02:49:24.157474555 +0000 UTC m=+18.319980685 I0413 02:49:24.171584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:24.171801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:49:24.171825 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 02:49:24.171819385 +0000 UTC m=+18.334325475 E0413 02:49:24.174874 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 02:49:24.174992 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 02:49:24.174974642 +0000 UTC m=+18.337480732 E0413 02:49:24.175019 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 02:49:24.184619 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 02:49:24.184736 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 02:49:24.184778 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 02:49:24.184821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 02:49:24.218500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kvsng" condition "Approved" to 2026-04-13 02:49:24.218481594 +0000 UTC m=+18.380987694 I0413 02:49:24.218847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:24.232486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kvsng" condition "Ready" to 2026-04-13 02:49:24.232471982 +0000 UTC m=+18.394978082 I0413 02:49:24.257274 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:49:24.25725347 +0000 UTC m=+18.419759600 I0413 02:49:24.270801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:24.271684 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:49:24.27167352 +0000 UTC m=+18.434179620 I0413 02:49:24.287675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:24.291944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:24.292274 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:49:24.292262344 +0000 UTC m=+18.454768454 I0413 02:49:24.294899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:29.186082 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:49:29.186013953 +0000 UTC m=+23.348520083 I0413 02:49:51.242423 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 02:49:51.242378191 +0000 UTC m=+45.404884281 I0413 02:49:51.244336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:49:51.244370 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 02:49:51.244361581 +0000 UTC m=+45.406867681 I0413 02:49:51.283479 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 02:49:51.283465295 +0000 UTC m=+45.445971385 I0413 02:49:51.296559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:51.296624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 02:49:51.296617103 +0000 UTC m=+45.459123193 I0413 02:49:51.415554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:52.022891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kwqzw" condition "Approved" to 2026-04-13 02:49:52.02288162 +0000 UTC m=+46.185387720 I0413 02:49:52.050676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kwqzw" condition "Ready" to 2026-04-13 02:49:52.050662439 +0000 UTC m=+46.213168569 E0413 02:49:52.050776 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-6zf5l not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-6zf5l\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-kwqzw" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0413 02:49:52.068446 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-6zf5l not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-6zf5l\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-kwqzw" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0413 02:49:52.119777 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" resource_name="rabbitmq-messaging-topology-operator-webhook" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-kwqzw" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-6zf5l" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0413 02:49:52.149521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w9ln6" condition "Approved" to 2026-04-13 02:49:52.149509126 +0000 UTC m=+46.312015216 I0413 02:49:52.169890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w9ln6" condition "Ready" to 2026-04-13 02:49:52.169873461 +0000 UTC m=+46.332379591 I0413 02:49:52.199524 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:49:52.199514709 +0000 UTC m=+46.362020799 I0413 02:49:52.221204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:49:52.273897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:54:05.008288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-04-13 02:54:05.008254949 +0000 UTC m=+299.170761049 I0413 02:54:05.008321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-123.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:54:05.008579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Issuing" to 2026-04-13 02:54:05.00854693 +0000 UTC m=+299.171053020 I0413 02:54:05.023204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:54:05.023257 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-04-13 02:54:05.023250469 +0000 UTC m=+299.185756569 I0413 02:54:05.300016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:54:05.323561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-r2m86" condition "Approved" to 2026-04-13 02:54:05.323546752 +0000 UTC m=+299.486052872 I0413 02:54:05.347579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-r2m86" condition "Ready" to 2026-04-13 02:54:05.347568669 +0000 UTC m=+299.510074769 I0413 02:54:05.372936 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:54:05.372925908 +0000 UTC m=+299.535432008 I0413 02:54:05.392899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:54:05.393701 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:54:05.393692378 +0000 UTC m=+299.556198478 I0413 02:54:05.407928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:54:05.408223 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:54:05.408217086 +0000 UTC m=+299.570723186 I0413 02:55:06.921257 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 02:55:06.921207976 +0000 UTC m=+361.083714096 I0413 02:55:06.921494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:06.921541 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 02:55:06.921530053 +0000 UTC m=+361.084036173 E0413 02:55:06.938403 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 02:55:06.938460 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 02:55:06.938449729 +0000 UTC m=+361.100955839 E0413 02:55:06.938537 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 02:55:06.941158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:06.941217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:06.941233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 02:55:06.941226959 +0000 UTC m=+361.103733059 E0413 02:55:06.948579 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 02:55:06.948694 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 02:55:06.948737 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 02:55:06.948781 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 02:55:06.975788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nthl6" condition "Approved" to 2026-04-13 02:55:06.975776226 +0000 UTC m=+361.138282326 I0413 02:55:06.989012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nthl6" condition "Ready" to 2026-04-13 02:55:06.988999582 +0000 UTC m=+361.151505682 I0413 02:55:07.009931 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:07.009917005 +0000 UTC m=+361.172423105 I0413 02:55:07.023443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:07.023672 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:07.023661636 +0000 UTC m=+361.186167746 I0413 02:55:07.037315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:07.037554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:11.948979 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:11.948965587 +0000 UTC m=+366.111471707 I0413 02:55:50.057289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:50.057323 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 02:55:50.057316944 +0000 UTC m=+404.219823034 I0413 02:55:50.057683 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 02:55:50.057669575 +0000 UTC m=+404.220175665 I0413 02:55:50.057966 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 02:55:50.057963564 +0000 UTC m=+404.220469654 I0413 02:55:50.058311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:50.058326 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 02:55:50.058323705 +0000 UTC m=+404.220829795 I0413 02:55:50.058469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:50.058483 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 02:55:50.05848086 +0000 UTC m=+404.220986950 I0413 02:55:50.058589 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 02:55:50.058586743 +0000 UTC m=+404.221092833 I0413 02:55:50.116522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:50.116546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:50.116601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 02:55:50.11659386 +0000 UTC m=+404.279099960 I0413 02:55:50.116639 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 02:55:50.116625891 +0000 UTC m=+404.279131981 I0413 02:55:50.116800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:50.116840 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 02:55:50.116835068 +0000 UTC m=+404.279341158 I0413 02:55:50.369859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:50.379371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0413 02:55:50.537919 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-kxwnp\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0413 02:55:50.539508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vsbv6" condition "Approved" to 2026-04-13 02:55:50.539501921 +0000 UTC m=+404.702008011 I0413 02:55:50.569739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vsbv6" condition "Ready" to 2026-04-13 02:55:50.569730937 +0000 UTC m=+404.732237027 I0413 02:55:50.596842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:50.611726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8w797" condition "Approved" to 2026-04-13 02:55:50.611711068 +0000 UTC m=+404.774217188 I0413 02:55:50.685341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d8rgn" condition "Approved" to 2026-04-13 02:55:50.685333648 +0000 UTC m=+404.847839738 I0413 02:55:50.686075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8w797" condition "Ready" to 2026-04-13 02:55:50.686070431 +0000 UTC m=+404.848576521 I0413 02:55:50.719171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d8rgn" condition "Ready" to 2026-04-13 02:55:50.719157656 +0000 UTC m=+404.881663756 I0413 02:55:51.143417 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-vsbv6" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-kxwnp" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0413 02:55:51.183689 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-8w797" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-rwxg2" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0413 02:55:51.236672 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:51.236661028 +0000 UTC m=+405.399167118 I0413 02:55:51.535603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:51.536172 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:51.536162589 +0000 UTC m=+405.698668719 E0413 02:55:51.579697 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-kxwnp\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0413 02:55:51.688519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c8v2h" condition "Approved" to 2026-04-13 02:55:51.688499455 +0000 UTC m=+405.851005585 I0413 02:55:51.790165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n84dl" condition "Approved" to 2026-04-13 02:55:51.790148571 +0000 UTC m=+405.952654691 I0413 02:55:52.093280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c8v2h" condition "Ready" to 2026-04-13 02:55:52.09326683 +0000 UTC m=+406.255772920 I0413 02:55:52.442863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n84dl" condition "Ready" to 2026-04-13 02:55:52.442851943 +0000 UTC m=+406.605358043 I0413 02:55:52.485352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:52.535175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:53.141473 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:53.141463706 +0000 UTC m=+407.303969796 I0413 02:55:53.235588 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:53.23555343 +0000 UTC m=+407.398059530 I0413 02:55:53.334428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:53.334742 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:53.334737165 +0000 UTC m=+407.497243265 I0413 02:55:53.485977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:53.486319 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:53.48631358 +0000 UTC m=+407.648819680 I0413 02:55:53.833377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:53.936955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:53.987067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:58.417084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" condition "Ready" to 2026-04-13 02:55:58.417066696 +0000 UTC m=+412.579572816 I0413 02:55:58.417217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:55:58.417254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" condition "Issuing" to 2026-04-13 02:55:58.417244752 +0000 UTC m=+412.579750852 I0413 02:55:58.432599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:58.432721 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" condition "Ready" to 2026-04-13 02:55:58.432711732 +0000 UTC m=+412.595217832 I0413 02:55:58.540528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:58.578039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pfvb6-454wf" condition "Approved" to 2026-04-13 02:55:58.578028234 +0000 UTC m=+412.740534334 I0413 02:55:58.594581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pfvb6-454wf" condition "Ready" to 2026-04-13 02:55:58.59457251 +0000 UTC m=+412.757078590 I0413 02:55:58.623923 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:55:58.62391001 +0000 UTC m=+412.786416100 I0413 02:55:58.644526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:55:58.692800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pfvb6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.577186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:56:12.577216 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 02:56:12.577208984 +0000 UTC m=+426.739715084 I0413 02:56:12.577546 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 02:56:12.577524955 +0000 UTC m=+426.740031095 I0413 02:56:12.597702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.597773 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 02:56:12.597766135 +0000 UTC m=+426.760272225 I0413 02:56:12.725068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.756404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cnv2t" condition "Approved" to 2026-04-13 02:56:12.756390239 +0000 UTC m=+426.918896329 I0413 02:56:12.775520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cnv2t" condition "Ready" to 2026-04-13 02:56:12.77551239 +0000 UTC m=+426.938018480 I0413 02:56:12.809231 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:56:12.809217095 +0000 UTC m=+426.971723195 I0413 02:56:12.831547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.831782 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:56:12.831775856 +0000 UTC m=+426.994281936 I0413 02:56:12.837531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.847771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.851309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:56:12.851682 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:56:12.851673283 +0000 UTC m=+427.014179383 I0413 02:59:28.741311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:59:28.741366 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 02:59:28.741358817 +0000 UTC m=+622.903864917 I0413 02:59:28.741695 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 02:59:28.741677892 +0000 UTC m=+622.904184022 I0413 02:59:28.756047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:59:28.756111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 02:59:28.756276 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 02:59:28.756267867 +0000 UTC m=+622.918773997 I0413 02:59:29.000078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jr9d6" condition "Approved" to 2026-04-13 02:59:29.000067754 +0000 UTC m=+623.162573874 I0413 02:59:29.021844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jr9d6" condition "Ready" to 2026-04-13 02:59:29.021832733 +0000 UTC m=+623.184338833 I0413 02:59:29.053300 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:59:29.053287284 +0000 UTC m=+623.215793384 I0413 02:59:29.071056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 02:59:29.071392 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 02:59:29.071385412 +0000 UTC m=+623.233891502 I0413 02:59:29.102631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:07.886647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 03:00:07.886676 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-13 03:00:07.886669762 +0000 UTC m=+662.049175862 I0413 03:00:07.886791 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 03:00:07.886776978 +0000 UTC m=+662.049283068 I0413 03:00:07.902847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:07.904765 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 03:00:07.904755048 +0000 UTC m=+662.067261188 I0413 03:00:08.114485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:08.146182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5x9tx" condition "Approved" to 2026-04-13 03:00:08.146169712 +0000 UTC m=+662.308675822 I0413 03:00:08.165987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5x9tx" condition "Ready" to 2026-04-13 03:00:08.165977626 +0000 UTC m=+662.328483726 I0413 03:00:08.193196 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 03:00:08.193152173 +0000 UTC m=+662.355658263 I0413 03:00:08.214015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:08.214279 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 03:00:08.214272363 +0000 UTC m=+662.376778453 I0413 03:00:08.232528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:08.236716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 03:00:08.236977 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 03:00:08.236971295 +0000 UTC m=+662.399477395 I0413 03:00:08.238620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"