I0407 15:21:46.544043 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 15:21:46.544211 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 15:21:46.544520 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 15:21:46.549527 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 15:21:46.550237 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 15:21:46.550246 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 15:21:46.550356 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 15:21:46.552887 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 15:21:46.567642 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 15:21:46.572893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 15:21:46.578294 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 15:21:46.578323 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 15:21:46.578337 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 15:21:46.578412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 15:21:46.580963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 15:21:46.583517 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 15:21:46.583554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 15:21:46.586041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 15:21:46.588291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 15:21:46.590136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 15:21:46.594135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 15:21:46.598336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 15:21:46.601265 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 15:21:46.601373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 15:21:46.603844 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 15:21:46.605924 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 15:21:46.605985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 15:21:46.608165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 15:21:46.610476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 15:21:46.612454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 15:21:46.616932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 15:21:46.622717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 15:21:46.627826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 15:21:46.629770 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.630108 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.631939 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.632250 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.632491 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.632691 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.632801 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.632973 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.633384 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:21:46.720783 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:22:01.200324 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 15:22:01.200307116 +0000 UTC m=+14.686488499 I0407 15:22:01.924848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:22:01.924911 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:22:01.924902321 +0000 UTC m=+15.411083694 I0407 15:22:01.926552 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:22:01.926538722 +0000 UTC m=+15.412720075 E0407 15:22:01.939607 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:22:01.939709 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 15:22:01.939698942 +0000 UTC m=+15.425880315 E0407 15:22:01.939742 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:22:01.941415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:01.941479 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:22:01.941472195 +0000 UTC m=+15.427653568 E0407 15:22:01.952240 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 15:22:01.952398 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:22:01.952487 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:22:01.952560 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 15:22:01.957406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:01.980453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bmn6" condition "Approved" to 2026-04-07 15:22:01.980442814 +0000 UTC m=+15.466624167 I0407 15:22:01.993656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bmn6" condition "Ready" to 2026-04-07 15:22:01.993646186 +0000 UTC m=+15.479827539 I0407 15:22:02.017081 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:22:02.017073236 +0000 UTC m=+15.503254579 I0407 15:22:02.033465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:06.953174 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:22:06.953123893 +0000 UTC m=+20.439305266 I0407 15:22:27.850606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:22:27.851187 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:22:27.850713502 +0000 UTC m=+41.336894855 I0407 15:22:27.852159 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 15:22:27.852153307 +0000 UTC m=+41.338334660 I0407 15:22:27.864558 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 15:22:27.864537823 +0000 UTC m=+41.350719196 I0407 15:22:27.884500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:27.884609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 15:22:27.884600533 +0000 UTC m=+41.370781876 I0407 15:22:28.004807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:28.036122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-p654b" condition "Approved" to 2026-04-07 15:22:28.036112057 +0000 UTC m=+41.522293410 I0407 15:22:28.068376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-p654b" condition "Ready" to 2026-04-07 15:22:28.068365828 +0000 UTC m=+41.554547171 I0407 15:22:28.095489 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:22:28.095474146 +0000 UTC m=+41.581655499 I0407 15:22:28.121213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:28.121823 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:22:28.121812966 +0000 UTC m=+41.607994319 I0407 15:22:28.147784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:22:28.148786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:53.488729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-18.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:53.488788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Issuing" to 2026-04-07 15:26:53.488782546 +0000 UTC m=+306.974963899 I0407 15:26:53.488717 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready" to 2026-04-07 15:26:53.488697714 +0000 UTC m=+306.974879097 I0407 15:26:53.510668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:53.510778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-18.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:53.510803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Issuing" to 2026-04-07 15:26:53.510796489 +0000 UTC m=+306.996977842 I0407 15:26:53.769089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:53.780837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-18.nip.io-tls-crrg9" condition "Approved" to 2026-04-07 15:26:53.780821025 +0000 UTC m=+307.267002398 I0407 15:26:53.808934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-18.nip.io-tls-crrg9" condition "Ready" to 2026-04-07 15:26:53.808917186 +0000 UTC m=+307.295098569 I0407 15:26:53.861894 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:53.861874184 +0000 UTC m=+307.348055557 I0407 15:26:53.888695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:56.998797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:27:56.998902 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:27:56.998888344 +0000 UTC m=+370.485069697 I0407 15:27:56.999367 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:27:56.999360805 +0000 UTC m=+370.485542158 E0407 15:27:57.012424 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:27:57.012519 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 15:27:57.012515003 +0000 UTC m=+370.498696346 E0407 15:27:57.012562 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:27:57.018523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:57.018618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:27:57.018613851 +0000 UTC m=+370.504795194 E0407 15:27:57.028876 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 15:27:57.029206 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:27:57.029277 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:27:57.029439 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 15:27:57.034867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:57.035495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:27:57.034938282 +0000 UTC m=+370.521119635 I0407 15:27:57.037069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qcw2j" condition "Approved" to 2026-04-07 15:27:57.03706106 +0000 UTC m=+370.523242413 I0407 15:27:57.045369 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:27:57.045360428 +0000 UTC m=+370.531541791 I0407 15:27:57.049131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qcw2j" condition "Ready" to 2026-04-07 15:27:57.049117823 +0000 UTC m=+370.535299186 I0407 15:27:57.054754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:57.065978 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:57.065961775 +0000 UTC m=+370.552143158 I0407 15:27:57.082832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:57.083278 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:57.083269257 +0000 UTC m=+370.569450610 I0407 15:27:57.097182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:57.099725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:02.029371 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:02.029358661 +0000 UTC m=+375.515540034 I0407 15:28:40.466637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:28:40.466706 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 15:28:40.466682062 +0000 UTC m=+413.952863395 I0407 15:28:40.471583 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:28:40.471570113 +0000 UTC m=+413.957751466 I0407 15:28:40.478137 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:28:40.478127361 +0000 UTC m=+413.964308694 I0407 15:28:40.478482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:28:40.478580 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 15:28:40.47857446 +0000 UTC m=+413.964755803 I0407 15:28:40.478910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:28:40.478993 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:28:40.47898818 +0000 UTC m=+413.965169523 I0407 15:28:40.479327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:28:40.479322987 +0000 UTC m=+413.965504330 I0407 15:28:40.554534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:40.554643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:40.556668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:40.556740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:28:40.556734026 +0000 UTC m=+414.042915359 I0407 15:28:40.557003 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:28:40.557000452 +0000 UTC m=+414.043181795 I0407 15:28:40.557312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:28:40.557329 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 15:28:40.557326349 +0000 UTC m=+414.043507692 I0407 15:28:40.816086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:40.827807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:40.860204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zbwnw" condition "Approved" to 2026-04-07 15:28:40.86019318 +0000 UTC m=+414.346374533 I0407 15:28:40.929214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fgj62" condition "Approved" to 2026-04-07 15:28:40.929155478 +0000 UTC m=+414.415336831 I0407 15:28:40.933526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zbwnw" condition "Ready" to 2026-04-07 15:28:40.933516467 +0000 UTC m=+414.419697820 I0407 15:28:40.960874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fgj62" condition "Ready" to 2026-04-07 15:28:40.960860794 +0000 UTC m=+414.447042147 I0407 15:28:41.025637 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:41.025624416 +0000 UTC m=+414.511805759 I0407 15:28:41.111399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:41.116000 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:41.115991268 +0000 UTC m=+414.602172611 I0407 15:28:41.160583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:41.161139 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:41.161132138 +0000 UTC m=+414.647313491 I0407 15:28:41.163316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:41.212692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:41.269528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vg4pk" condition "Approved" to 2026-04-07 15:28:41.269519256 +0000 UTC m=+414.755700599 I0407 15:28:41.355845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:41.665062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vg4pk" condition "Ready" to 2026-04-07 15:28:41.665051669 +0000 UTC m=+415.151233022 I0407 15:28:42.134969 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:42.13494554 +0000 UTC m=+415.621126913 I0407 15:28:42.164414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:42.165011 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:42.165001339 +0000 UTC m=+415.651182712 I0407 15:28:42.354881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:48.908516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" condition "Ready" to 2026-04-07 15:28:48.908501002 +0000 UTC m=+422.394682355 I0407 15:28:48.908869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:28:48.908886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" condition "Issuing" to 2026-04-07 15:28:48.908882462 +0000 UTC m=+422.395063815 I0407 15:28:48.923995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:48.924111 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" condition "Ready" to 2026-04-07 15:28:48.924102774 +0000 UTC m=+422.410284127 I0407 15:28:49.259155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:49.291500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nrhrq-4qjzv" condition "Approved" to 2026-04-07 15:28:49.291486887 +0000 UTC m=+422.777668240 I0407 15:28:49.312415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nrhrq-4qjzv" condition "Ready" to 2026-04-07 15:28:49.312404379 +0000 UTC m=+422.798585732 I0407 15:28:49.357341 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:49.357326323 +0000 UTC m=+422.843507666 I0407 15:28:49.481176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:28:49.481507 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:28:49.481501115 +0000 UTC m=+422.967682468 I0407 15:28:49.508209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nrhrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:29:00.552177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 15:29:00.552148999 +0000 UTC m=+434.038330352 I0407 15:29:00.552701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:29:00.552726 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:29:00.552720051 +0000 UTC m=+434.038901404 I0407 15:29:00.584968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:29:00.585097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:29:00.585143 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:29:00.585113382 +0000 UTC m=+434.071294745 I0407 15:29:00.772492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tqqlp" condition "Approved" to 2026-04-07 15:29:00.772415505 +0000 UTC m=+434.258596848 I0407 15:29:00.797012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tqqlp" condition "Ready" to 2026-04-07 15:29:00.7970034 +0000 UTC m=+434.283184733 I0407 15:29:00.833238 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:29:00.833225997 +0000 UTC m=+434.319407340 I0407 15:29:00.854408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:10.970826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:10.970888 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:32:10.970862744 +0000 UTC m=+624.457044127 I0407 15:32:10.971189 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:32:10.971168691 +0000 UTC m=+624.457350064 I0407 15:32:10.988692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:10.988768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:10.988788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:32:10.988780564 +0000 UTC m=+624.474961907 I0407 15:32:11.353427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8lslx" condition "Approved" to 2026-04-07 15:32:11.353411173 +0000 UTC m=+624.839592516 I0407 15:32:11.371465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8lslx" condition "Ready" to 2026-04-07 15:32:11.371453405 +0000 UTC m=+624.857634748 I0407 15:32:11.418430 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:11.418417894 +0000 UTC m=+624.904599227 I0407 15:32:11.440931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:53.158243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:53.158334 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 15:32:53.158322638 +0000 UTC m=+666.644504011 I0407 15:32:53.158782 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 15:32:53.158773798 +0000 UTC m=+666.644955171 I0407 15:32:53.184031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:53.184169 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 15:32:53.184155394 +0000 UTC m=+666.670336747 I0407 15:32:53.403824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:53.430383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hxgdl" condition "Approved" to 2026-04-07 15:32:53.430371232 +0000 UTC m=+666.916552575 I0407 15:32:53.455132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hxgdl" condition "Ready" to 2026-04-07 15:32:53.455118703 +0000 UTC m=+666.941300046 I0407 15:32:53.492925 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:53.492893035 +0000 UTC m=+666.979074388 I0407 15:32:53.517767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:53.518386 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:53.518380133 +0000 UTC m=+667.004561466 I0407 15:32:53.535394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:53.535797 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:53.535787211 +0000 UTC m=+667.021968564