I0421 17:06:16.145153 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 17:06:16.145516 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 17:06:16.145688 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 17:06:16.148887 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 17:06:16.149280 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 17:06:16.149643 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 17:06:16.149674 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 17:06:16.151944 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 17:06:16.166197 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 17:06:16.171072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 17:06:16.176425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 17:06:16.179298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 17:06:16.181661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 17:06:16.184198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 17:06:16.186675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 17:06:16.188672 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 17:06:16.188711 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 17:06:16.190565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 17:06:16.195623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 17:06:16.195723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 17:06:16.198074 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 17:06:16.198164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 17:06:16.200730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 17:06:16.203061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 17:06:16.204868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 17:06:16.206648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 17:06:16.208550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 17:06:16.210212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 17:06:16.215290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 17:06:16.218188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 17:06:16.218212 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 17:06:16.218221 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 17:06:16.218647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 17:06:16.220598 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.220671 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.221705 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.239090 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.255030 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.271884 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.283352 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.300477 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.302031 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:16.317539 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:06:28.315854 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:06:28.315832926 +0000 UTC m=+12.203415465 I0421 17:06:29.004874 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:06:29.004862102 +0000 UTC m=+12.892444651 I0421 17:06:29.005643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:06:29.005731 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:06:29.005720804 +0000 UTC m=+12.893303363 E0421 17:06:29.018069 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:06:29.018176 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:06:29.018164405 +0000 UTC m=+12.905746944 E0421 17:06:29.018215 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:06:29.022188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:29.022332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:06:29.022357 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:06:29.022350499 +0000 UTC m=+12.909933038 E0421 17:06:29.028833 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 17:06:29.028904 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:06:29.028934 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:06:29.028968 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 17:06:29.060983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:29.070484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hnwqt" condition "Approved" to 2026-04-21 17:06:29.070470281 +0000 UTC m=+12.958052850 I0421 17:06:29.082428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hnwqt" condition "Ready" to 2026-04-21 17:06:29.082415152 +0000 UTC m=+12.969997681 I0421 17:06:29.115573 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:06:29.115562825 +0000 UTC m=+13.003145364 I0421 17:06:29.139126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:29.139445 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:06:29.139438109 +0000 UTC m=+13.027020648 I0421 17:06:29.168767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:34.029396 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:06:34.029382937 +0000 UTC m=+17.916965496 I0421 17:06:55.026503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:06:55.026538 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:06:55.026530595 +0000 UTC m=+38.914113124 I0421 17:06:55.026534 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:06:55.026518145 +0000 UTC m=+38.914100684 I0421 17:06:55.042127 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:06:55.042110605 +0000 UTC m=+38.929693164 I0421 17:06:55.048232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:55.048391 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:06:55.048382612 +0000 UTC m=+38.935965141 I0421 17:06:55.325667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:55.448560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wknxh" condition "Approved" to 2026-04-21 17:06:55.448544601 +0000 UTC m=+39.336127170 I0421 17:06:55.496161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wknxh" condition "Ready" to 2026-04-21 17:06:55.496151719 +0000 UTC m=+39.383734248 I0421 17:06:55.561078 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:06:55.561053725 +0000 UTC m=+39.448636284 I0421 17:06:55.627913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:55.628383 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:06:55.628359163 +0000 UTC m=+39.515941702 I0421 17:06:55.662585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:06:55.685325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:10:59.407341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:10:59.407375 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Issuing" to 2026-04-21 17:10:59.407368705 +0000 UTC m=+283.294951244 I0421 17:10:59.407960 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready" to 2026-04-21 17:10:59.407951454 +0000 UTC m=+283.295534013 I0421 17:10:59.430122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:10:59.433842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:10:59.433886 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Issuing" to 2026-04-21 17:10:59.43387964 +0000 UTC m=+283.321462169 I0421 17:10:59.658616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:10:59.661722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-5rqsl" condition "Approved" to 2026-04-21 17:10:59.661714568 +0000 UTC m=+283.549297097 I0421 17:10:59.687161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-5rqsl" condition "Ready" to 2026-04-21 17:10:59.68714554 +0000 UTC m=+283.574728109 I0421 17:10:59.729996 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:10:59.729984587 +0000 UTC m=+283.617567156 I0421 17:10:59.747927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:10:59.748207 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:10:59.748202636 +0000 UTC m=+283.635785175 I0421 17:10:59.798007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:06.249664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:12:06.249599345 +0000 UTC m=+350.137181904 I0421 17:12:06.249720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:06.249794 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:12:06.249782226 +0000 UTC m=+350.137364785 E0421 17:12:06.263775 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:12:06.264004 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:12:06.263994177 +0000 UTC m=+350.151576716 E0421 17:12:06.264060 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:12:06.265809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:06.266084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:12:06.266053071 +0000 UTC m=+350.153635610 E0421 17:12:06.275724 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 17:12:06.275942 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:12:06.276035 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:12:06.276119 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 17:12:06.277900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:06.295678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b54pt" condition "Approved" to 2026-04-21 17:12:06.29566743 +0000 UTC m=+350.183249969 I0421 17:12:06.310938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b54pt" condition "Ready" to 2026-04-21 17:12:06.310924059 +0000 UTC m=+350.198506618 I0421 17:12:06.335106 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:06.335090564 +0000 UTC m=+350.222673133 I0421 17:12:06.354024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:06.354482 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:06.354472403 +0000 UTC m=+350.242054942 I0421 17:12:06.367681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:06.367962 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:06.367954794 +0000 UTC m=+350.255537323 I0421 17:12:06.370295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:11.276929 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:11.276915451 +0000 UTC m=+355.164498010 I0421 17:12:56.123706 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:12:56.123547575 +0000 UTC m=+400.011130104 I0421 17:12:56.123825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:56.123852 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:12:56.123845892 +0000 UTC m=+400.011428421 I0421 17:12:56.124002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:56.124020 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:12:56.124018152 +0000 UTC m=+400.011600681 I0421 17:12:56.124132 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:12:56.124128709 +0000 UTC m=+400.011711238 I0421 17:12:56.124883 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:12:56.124879883 +0000 UTC m=+400.012462412 I0421 17:12:56.125044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:56.125059 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:12:56.125057033 +0000 UTC m=+400.012639562 I0421 17:12:56.268214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.268285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:56.268629 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:12:56.268623621 +0000 UTC m=+400.156206160 I0421 17:12:56.275052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.275116 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:12:56.275110378 +0000 UTC m=+400.162692907 I0421 17:12:56.322261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.324913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:56.325540 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:12:56.32552844 +0000 UTC m=+400.213110989 I0421 17:12:56.518105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.525786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9g8ls" condition "Approved" to 2026-04-21 17:12:56.525776544 +0000 UTC m=+400.413359073 I0421 17:12:56.548774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9g8ls" condition "Ready" to 2026-04-21 17:12:56.548762821 +0000 UTC m=+400.436345360 I0421 17:12:56.579978 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:56.579960434 +0000 UTC m=+400.467543003 I0421 17:12:56.601326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.649314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.652102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qf9xc" condition "Approved" to 2026-04-21 17:12:56.652085069 +0000 UTC m=+400.539667638 I0421 17:12:56.668734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qf9xc" condition "Ready" to 2026-04-21 17:12:56.668720766 +0000 UTC m=+400.556303305 I0421 17:12:56.717246 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:56.717234797 +0000 UTC m=+400.604817326 I0421 17:12:56.733807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.745692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:56.746199 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:56.74619004 +0000 UTC m=+400.633772579 I0421 17:12:56.961280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:57.011068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njh4d" condition "Approved" to 2026-04-21 17:12:57.011053252 +0000 UTC m=+400.898635791 I0421 17:12:57.415891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njh4d" condition "Ready" to 2026-04-21 17:12:57.415876768 +0000 UTC m=+401.303459307 I0421 17:12:57.611324 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:57.61130762 +0000 UTC m=+401.498890159 I0421 17:12:57.702803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:04.070316 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" condition "Ready" to 2026-04-21 17:13:04.070281469 +0000 UTC m=+407.957864008 I0421 17:13:04.070337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:13:04.070380 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" condition "Issuing" to 2026-04-21 17:13:04.070358174 +0000 UTC m=+407.957940713 I0421 17:13:04.086989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:04.087059 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" condition "Ready" to 2026-04-21 17:13:04.087054099 +0000 UTC m=+407.974636638 I0421 17:13:04.387998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:04.432779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vkk6-m766r" condition "Approved" to 2026-04-21 17:13:04.43276644 +0000 UTC m=+408.320348969 I0421 17:13:04.458906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vkk6-m766r" condition "Ready" to 2026-04-21 17:13:04.458895997 +0000 UTC m=+408.346478526 I0421 17:13:04.486161 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:04.486146621 +0000 UTC m=+408.373729160 I0421 17:13:04.505356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vkk6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:16.615243 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:13:16.615227726 +0000 UTC m=+420.502810265 I0421 17:13:16.615522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:13:16.615580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:13:16.615552136 +0000 UTC m=+420.503134675 I0421 17:13:16.631069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:16.631173 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:13:16.631160645 +0000 UTC m=+420.518743174 I0421 17:13:16.739564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:16.776824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wxhxf" condition "Approved" to 2026-04-21 17:13:16.776815814 +0000 UTC m=+420.664398343 I0421 17:13:16.799054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wxhxf" condition "Ready" to 2026-04-21 17:13:16.799043323 +0000 UTC m=+420.686625862 I0421 17:13:16.826490 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:16.82647333 +0000 UTC m=+420.714055859 I0421 17:13:16.849252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:16.849564 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:16.849555099 +0000 UTC m=+420.737137628 I0421 17:13:16.879834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:16.880101 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:16.880094337 +0000 UTC m=+420.767676866 I0421 17:13:16.887404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:16:30.910626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:16:30.910592832 +0000 UTC m=+614.798175361 I0421 17:16:30.910664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:16:30.910760 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:16:30.910751402 +0000 UTC m=+614.798333941 I0421 17:16:30.942712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:16:30.942867 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:16:30.942816371 +0000 UTC m=+614.830398940 I0421 17:16:31.317003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:16:31.344061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ct9wf" condition "Approved" to 2026-04-21 17:16:31.344051454 +0000 UTC m=+615.231633983 I0421 17:16:31.369692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ct9wf" condition "Ready" to 2026-04-21 17:16:31.369678102 +0000 UTC m=+615.257260631 I0421 17:16:31.402082 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:16:31.402065969 +0000 UTC m=+615.289648498 I0421 17:16:31.426518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:13.269883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:17:13.269944 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 17:17:13.269937229 +0000 UTC m=+657.157519758 I0421 17:17:13.270273 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 17:17:13.270257051 +0000 UTC m=+657.157839580 I0421 17:17:13.288560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:13.288655 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 17:17:13.288648134 +0000 UTC m=+657.176230663 I0421 17:17:13.504086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:13.550359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkp9x" condition "Approved" to 2026-04-21 17:17:13.550343136 +0000 UTC m=+657.437925665 I0421 17:17:13.571173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gkp9x" condition "Ready" to 2026-04-21 17:17:13.571160665 +0000 UTC m=+657.458743204 I0421 17:17:13.598220 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:17:13.598207496 +0000 UTC m=+657.485790025 I0421 17:17:13.632675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"