I0416 16:29:37.011107 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 16:29:37.011245 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 16:29:37.011333 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 16:29:37.015499 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 16:29:37.015941 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 16:29:37.016064 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 16:29:37.016073 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 16:29:37.019400 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 16:29:37.035540 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 16:29:37.035778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 16:29:37.039220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 16:29:37.045601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 16:29:37.049548 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 16:29:37.049707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 16:29:37.051331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 16:29:37.051379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 16:29:37.053361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 16:29:37.056201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 16:29:37.059206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 16:29:37.065822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 16:29:37.069441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 16:29:37.071210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 16:29:37.073170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 16:29:37.074799 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 16:29:37.074929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 16:29:37.076706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 16:29:37.078551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 16:29:37.080369 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 16:29:37.080476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 16:29:37.082241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 16:29:37.088695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 16:29:37.091436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 16:29:37.091962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 16:29:37.094472 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.094685 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.095477 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.095622 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.115557 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.134149 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.142580 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.154685 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.172154 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:37.178989 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:51.046535 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:29:51.046518712 +0000 UTC m=+14.072911054 I0416 16:29:51.926496 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:29:51.926478872 +0000 UTC m=+14.952871224 I0416 16:29:51.926585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:29:51.926638 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:29:51.926631729 +0000 UTC m=+14.953024071 I0416 16:29:51.944785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:51.944878 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:29:51.944868022 +0000 UTC m=+14.971260354 E0416 16:29:51.946688 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:29:51.946751 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:29:51.946743946 +0000 UTC m=+14.973136288 E0416 16:29:51.946777 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:51.963583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 16:29:51.963793 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:51.963891 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:51.964018 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 16:29:51.966131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:51.993234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x278q" condition "Approved" to 2026-04-16 16:29:51.993220814 +0000 UTC m=+15.019613166 I0416 16:29:52.010672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x278q" condition "Ready" to 2026-04-16 16:29:52.010660463 +0000 UTC m=+15.037052785 I0416 16:29:52.032118 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:52.032108192 +0000 UTC m=+15.058500514 I0416 16:29:52.053694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:52.147359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:56.964150 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:56.964107331 +0000 UTC m=+19.990499663 I0416 16:30:27.810038 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:30:27.809445974 +0000 UTC m=+50.835838336 I0416 16:30:27.811168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:30:27.811227 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:30:27.811211549 +0000 UTC m=+50.837603911 I0416 16:30:27.836354 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:30:27.836337448 +0000 UTC m=+50.862729760 I0416 16:30:27.843080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:30:27.843203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:30:27.843243 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:30:27.84323385 +0000 UTC m=+50.869626202 I0416 16:30:28.079036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:30:28.086516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2rdc" condition "Approved" to 2026-04-16 16:30:28.086502491 +0000 UTC m=+51.112894833 I0416 16:30:28.118144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2rdc" condition "Ready" to 2026-04-16 16:30:28.118129693 +0000 UTC m=+51.144522025 I0416 16:30:28.151787 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:30:28.151770477 +0000 UTC m=+51.178162819 I0416 16:30:28.187857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:33.111047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-137.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:38:33.111131 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-137.nip.io-tls" condition "Issuing" to 2026-04-16 16:38:33.111123659 +0000 UTC m=+536.137516001 I0416 16:38:33.111518 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-137.nip.io-tls" condition "Ready" to 2026-04-16 16:38:33.111510815 +0000 UTC m=+536.137903147 I0416 16:38:33.130505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-137.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-137.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:33.130589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-137.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:38:33.130613 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-137.nip.io-tls" condition "Issuing" to 2026-04-16 16:38:33.130604094 +0000 UTC m=+536.156996456 I0416 16:38:33.376996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-137.nip.io-tls-5cx8p" condition "Approved" to 2026-04-16 16:38:33.376982582 +0000 UTC m=+536.403374944 I0416 16:38:33.400193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-137.nip.io-tls-5cx8p" condition "Ready" to 2026-04-16 16:38:33.400181957 +0000 UTC m=+536.426574279 I0416 16:38:33.438217 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-137.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:38:33.438198419 +0000 UTC m=+536.464590761 I0416 16:38:33.542139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-137.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-137.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:33.592594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-137.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-137.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:40.366824 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:39:40.366749102 +0000 UTC m=+603.393141464 I0416 16:39:40.367336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:40.367371 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:39:40.367362033 +0000 UTC m=+603.393754385 E0416 16:39:40.690463 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:39:40.690508 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:39:40.690498403 +0000 UTC m=+603.716890745 E0416 16:39:40.690569 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:39:40.695330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:40.695588 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:39:40.695578281 +0000 UTC m=+603.721970653 E0416 16:39:40.795017 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 16:39:40.795303 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:39:40.795356 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:39:40.795406 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 16:39:40.854205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:40.941228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6qrzq" condition "Approved" to 2026-04-16 16:39:40.941218391 +0000 UTC m=+603.967610713 I0416 16:39:41.204182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6qrzq" condition "Ready" to 2026-04-16 16:39:41.20416992 +0000 UTC m=+604.230562252 I0416 16:39:41.768679 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:41.768638621 +0000 UTC m=+604.795030983 I0416 16:39:42.024479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:42.024769 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:42.024759486 +0000 UTC m=+605.051151848 I0416 16:39:42.098608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:42.107127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:45.795661 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:45.795647715 +0000 UTC m=+608.822040067 I0416 16:40:38.466323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:38.472337 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:40:38.47231747 +0000 UTC m=+661.498709812 I0416 16:40:38.466420 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:40:38.466411456 +0000 UTC m=+661.492803798 I0416 16:40:38.493767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:38.493799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:40:38.493791979 +0000 UTC m=+661.520184301 I0416 16:40:38.494621 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:40:38.494605094 +0000 UTC m=+661.520997406 I0416 16:40:38.495647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:38.495685 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:40:38.495681748 +0000 UTC m=+661.522074070 I0416 16:40:38.495792 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:40:38.495787762 +0000 UTC m=+661.522180084 I0416 16:40:38.534162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.534267 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:40:38.534257579 +0000 UTC m=+661.560649911 I0416 16:40:38.544360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.544427 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:40:38.544421097 +0000 UTC m=+661.570813419 I0416 16:40:38.549375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.549427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:40:38.549421243 +0000 UTC m=+661.575813565 I0416 16:40:38.700117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.708763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.744884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fd74l" condition "Approved" to 2026-04-16 16:40:38.744874153 +0000 UTC m=+661.771266485 I0416 16:40:38.751105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6j8mr" condition "Approved" to 2026-04-16 16:40:38.751096967 +0000 UTC m=+661.777489299 I0416 16:40:38.767363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fd74l" condition "Ready" to 2026-04-16 16:40:38.767352394 +0000 UTC m=+661.793744726 I0416 16:40:38.770108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6j8mr" condition "Ready" to 2026-04-16 16:40:38.770097039 +0000 UTC m=+661.796489371 I0416 16:40:38.815838 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:38.815825324 +0000 UTC m=+661.842217646 I0416 16:40:38.837641 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:38.837626523 +0000 UTC m=+661.864018845 I0416 16:40:38.838256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.851798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.852467 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:38.852456215 +0000 UTC m=+661.878848567 I0416 16:40:38.870446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:38.870773 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:38.870764155 +0000 UTC m=+661.897156487 I0416 16:40:39.161152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6z5z5" condition "Approved" to 2026-04-16 16:40:39.161136413 +0000 UTC m=+662.187528755 I0416 16:40:39.254829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:39.355017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:39.395008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:39.510280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6z5z5" condition "Ready" to 2026-04-16 16:40:39.510254563 +0000 UTC m=+662.536646895 I0416 16:40:40.043714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:40.096398 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:40.096383407 +0000 UTC m=+663.122775739 I0416 16:40:40.193179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:40.193570 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:40.193561215 +0000 UTC m=+663.219953547 I0416 16:40:41.092407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:55.816582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:55.816587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" condition "Ready" to 2026-04-16 16:40:55.816539434 +0000 UTC m=+678.842931796 I0416 16:40:55.816620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" condition "Issuing" to 2026-04-16 16:40:55.816612026 +0000 UTC m=+678.843004348 I0416 16:40:55.833753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:55.833816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:55.833834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" condition "Issuing" to 2026-04-16 16:40:55.833826597 +0000 UTC m=+678.860218929 I0416 16:40:56.140517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:56.149547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6pwgx-k5dxh" condition "Approved" to 2026-04-16 16:40:56.149524661 +0000 UTC m=+679.175917013 I0416 16:40:56.208478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6pwgx-k5dxh" condition "Ready" to 2026-04-16 16:40:56.20846842 +0000 UTC m=+679.234860752 I0416 16:40:56.338908 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:56.338889876 +0000 UTC m=+679.365282228 I0416 16:40:56.408615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:56.408919 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:56.408910918 +0000 UTC m=+679.435303250 I0416 16:40:56.473288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:57.156266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pwgx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:41:26.178061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:41:26.178158 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:41:26.178149262 +0000 UTC m=+709.204541594 I0416 16:41:26.178073 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:41:26.178041859 +0000 UTC m=+709.204434191 I0416 16:41:26.200793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:41:26.200870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:41:26.200886 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:41:26.200880204 +0000 UTC m=+709.227272536 I0416 16:41:26.459373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zscps" condition "Approved" to 2026-04-16 16:41:26.459361267 +0000 UTC m=+709.485753589 I0416 16:41:26.629149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zscps" condition "Ready" to 2026-04-16 16:41:26.629137297 +0000 UTC m=+709.655529629 I0416 16:41:26.690556 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:41:26.690544467 +0000 UTC m=+709.716936789 I0416 16:41:26.753723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:44:36.183515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:44:36.183559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:44:36.183554159 +0000 UTC m=+899.209946481 I0416 16:44:36.183834 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:44:36.183819385 +0000 UTC m=+899.210211707 I0416 16:44:36.202143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:44:36.202222 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:44:36.202214977 +0000 UTC m=+899.228607309 I0416 16:44:36.420984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:44:36.454360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fm5w5" condition "Approved" to 2026-04-16 16:44:36.454348431 +0000 UTC m=+899.480740753 I0416 16:44:36.481915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fm5w5" condition "Ready" to 2026-04-16 16:44:36.481889858 +0000 UTC m=+899.508282190 I0416 16:44:36.509358 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:44:36.509346823 +0000 UTC m=+899.535739155 I0416 16:44:36.536179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:44:36.536547 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:44:36.536540731 +0000 UTC m=+899.562933063 I0416 16:44:36.560922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:18.439413 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 16:45:18.439391831 +0000 UTC m=+941.465784173 I0416 16:45:18.439758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:45:18.439855 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 16:45:18.439835401 +0000 UTC m=+941.466227753 I0416 16:45:18.465211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:18.465295 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 16:45:18.465287428 +0000 UTC m=+941.491679760 I0416 16:45:18.586486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:18.622916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b48xt" condition "Approved" to 2026-04-16 16:45:18.622908071 +0000 UTC m=+941.649300383 I0416 16:45:18.655039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b48xt" condition "Ready" to 2026-04-16 16:45:18.655027072 +0000 UTC m=+941.681419394 I0416 16:45:18.700896 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:45:18.70088633 +0000 UTC m=+941.727278662 I0416 16:45:18.722992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:18.723264 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:45:18.723257271 +0000 UTC m=+941.749649593 I0416 16:45:18.745485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"