I0408 17:01:41.253201 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 17:01:41.253300 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 17:01:41.253377 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 17:01:41.257955 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 17:01:41.258547 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 17:01:41.258646 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 17:01:41.258824 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 17:01:41.265111 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 17:01:41.280585 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 17:01:41.284580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 17:01:41.288038 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 17:01:41.289892 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 17:01:41.289942 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 17:01:41.289957 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 17:01:41.289966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 17:01:41.294471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 17:01:41.299520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 17:01:41.304656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 17:01:41.307293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 17:01:41.310244 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 17:01:41.310366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 17:01:41.312765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 17:01:41.315731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 17:01:41.318516 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 17:01:41.318543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 17:01:41.324573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 17:01:41.327145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 17:01:41.330244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 17:01:41.333257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 17:01:41.335598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 17:01:41.337774 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 17:01:41.337873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 17:01:41.340050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 17:01:41.344725 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.345072 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.346149 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.346368 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.372322 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.384315 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.401743 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.417147 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.435762 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:41.450313 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 17:01:52.448362 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 17:01:52.447868668 +0000 UTC m=+11.230595786 I0408 17:01:53.300769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:01:53.301003 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 17:01:53.300973607 +0000 UTC m=+12.083700765 I0408 17:01:53.301189 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 17:01:53.301182884 +0000 UTC m=+12.083910002 E0408 17:01:53.315667 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 17:01:53.315746 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 17:01:53.315736466 +0000 UTC m=+12.098463594 E0408 17:01:53.315777 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 17:01:53.318900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:01:53.319072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:01:53.319104 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 17:01:53.319095639 +0000 UTC m=+12.101822747 E0408 17:01:53.326923 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 17:01:53.327302 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 17:01:53.327449 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 17:01:53.328311 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 17:01:53.361589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:01:53.365215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vscw8" condition "Approved" to 2026-04-08 17:01:53.365202162 +0000 UTC m=+12.147929280 I0408 17:01:53.379594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vscw8" condition "Ready" to 2026-04-08 17:01:53.37958078 +0000 UTC m=+12.162307928 I0408 17:01:53.398995 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:01:53.398974394 +0000 UTC m=+12.181701512 I0408 17:01:53.417847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:01:53.462924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:01:58.328375 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:01:58.328363625 +0000 UTC m=+17.111090743 I0408 17:02:21.596227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:02:21.596353 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 17:02:21.596321139 +0000 UTC m=+40.379048247 I0408 17:02:21.596388 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 17:02:21.596329609 +0000 UTC m=+40.379056727 I0408 17:02:21.620083 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 17:02:21.620069424 +0000 UTC m=+40.402796532 I0408 17:02:21.629600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:02:21.629947 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 17:02:21.629934155 +0000 UTC m=+40.412661293 I0408 17:02:21.839356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:02:21.880567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fpvcq" condition "Approved" to 2026-04-08 17:02:21.880554254 +0000 UTC m=+40.663281372 I0408 17:02:21.908394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fpvcq" condition "Ready" to 2026-04-08 17:02:21.908385847 +0000 UTC m=+40.691112945 I0408 17:02:21.946100 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:02:21.946085911 +0000 UTC m=+40.728813029 I0408 17:02:21.965268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:02:21.965545 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:02:21.965539436 +0000 UTC m=+40.748266554 I0408 17:02:21.975956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:02:21.987064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:07:02.436091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-133.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:07:02.436184 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Issuing" to 2026-04-08 17:07:02.4361516 +0000 UTC m=+321.218878748 I0408 17:07:02.437026 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready" to 2026-04-08 17:07:02.437017868 +0000 UTC m=+321.219744976 I0408 17:07:02.451484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:07:02.451699 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready" to 2026-04-08 17:07:02.45168838 +0000 UTC m=+321.234415518 I0408 17:07:02.717645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:07:02.756105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-r7knc" condition "Approved" to 2026-04-08 17:07:02.756090235 +0000 UTC m=+321.538817373 I0408 17:07:02.797352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-133.nip.io-tls-r7knc" condition "Ready" to 2026-04-08 17:07:02.79734058 +0000 UTC m=+321.580067728 I0408 17:07:02.833562 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:07:02.833553468 +0000 UTC m=+321.616280586 I0408 17:07:02.878759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:07:02.879266 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-133.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:07:02.879253907 +0000 UTC m=+321.661981035 I0408 17:07:02.897470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-133.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-133.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:08:10.122264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:08:10.122305 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 17:08:10.122255631 +0000 UTC m=+388.904982769 I0408 17:08:10.122368 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 17:08:10.122356203 +0000 UTC m=+388.905083351 I0408 17:08:10.137786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:08:10.137864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 17:08:10.137855187 +0000 UTC m=+388.920582305 E0408 17:08:10.137952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 17:08:10.137979 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 17:08:10.137973489 +0000 UTC m=+388.920700607 E0408 17:08:10.138032 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 17:08:10.150751 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 17:08:10.155834 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 17:08:10.155874 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 17:08:10.155981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 17:08:10.161416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:08:10.182484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9dbnm" condition "Approved" to 2026-04-08 17:08:10.182451753 +0000 UTC m=+388.965178871 I0408 17:08:10.198109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9dbnm" condition "Ready" to 2026-04-08 17:08:10.198023749 +0000 UTC m=+388.980750887 I0408 17:08:10.220095 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:08:10.220080858 +0000 UTC m=+389.002807976 I0408 17:08:10.236074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:08:10.282265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:08:15.151724 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:08:15.151687666 +0000 UTC m=+393.934414814 I0408 17:09:00.649358 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 17:09:00.649341451 +0000 UTC m=+439.432068549 I0408 17:09:00.649843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:00.649863 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 17:09:00.649859979 +0000 UTC m=+439.432587087 I0408 17:09:00.666152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:00.666181 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 17:09:00.666176251 +0000 UTC m=+439.448903349 I0408 17:09:00.666362 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 17:09:00.666358764 +0000 UTC m=+439.449085872 I0408 17:09:00.688205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:00.688241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 17:09:00.688233043 +0000 UTC m=+439.470960151 I0408 17:09:00.688824 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 17:09:00.688805833 +0000 UTC m=+439.471532941 I0408 17:09:00.698545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:00.698593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:00.698606 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 17:09:00.69860164 +0000 UTC m=+439.481328748 I0408 17:09:00.709591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:00.709633 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 17:09:00.709628886 +0000 UTC m=+439.492355984 I0408 17:09:00.735556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:00.736868 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 17:09:00.736856242 +0000 UTC m=+439.519583390 I0408 17:09:00.952685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:00.953256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-45ncz" condition "Approved" to 2026-04-08 17:09:00.953242037 +0000 UTC m=+439.735969145 I0408 17:09:00.983503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-45ncz" condition "Ready" to 2026-04-08 17:09:00.983488132 +0000 UTC m=+439.766215240 I0408 17:09:00.994748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dfz95" condition "Approved" to 2026-04-08 17:09:00.994735682 +0000 UTC m=+439.777462790 I0408 17:09:01.009807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dfz95" condition "Ready" to 2026-04-08 17:09:01.009794903 +0000 UTC m=+439.792522011 I0408 17:09:01.031223 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:01.031212346 +0000 UTC m=+439.813939454 I0408 17:09:01.055453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.056185 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:01.056175175 +0000 UTC m=+439.838902313 I0408 17:09:01.058608 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:01.058598284 +0000 UTC m=+439.841325432 I0408 17:09:01.082142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.082389 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:01.082382873 +0000 UTC m=+439.865109981 I0408 17:09:01.083041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.083413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.083774 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:01.083767706 +0000 UTC m=+439.866494814 I0408 17:09:01.138539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.554797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.592238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:01.643710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5p2nz" condition "Approved" to 2026-04-08 17:09:01.643664447 +0000 UTC m=+440.426391595 I0408 17:09:01.911545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5p2nz" condition "Ready" to 2026-04-08 17:09:01.911529459 +0000 UTC m=+440.694256577 I0408 17:09:02.240892 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:02.240872398 +0000 UTC m=+441.023599536 I0408 17:09:02.338316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:02.338703 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:02.338688849 +0000 UTC m=+441.121415957 I0408 17:09:02.540883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:10.037707 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" condition "Ready" to 2026-04-08 17:09:10.037664419 +0000 UTC m=+448.820391547 I0408 17:09:10.038774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:10.038815 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" condition "Issuing" to 2026-04-08 17:09:10.038805797 +0000 UTC m=+448.821532945 I0408 17:09:10.054555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:10.054618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:10.054639 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" condition "Issuing" to 2026-04-08 17:09:10.054631957 +0000 UTC m=+448.837359075 I0408 17:09:10.293264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fq5n6-j5d5d" condition "Approved" to 2026-04-08 17:09:10.293243946 +0000 UTC m=+449.075971054 I0408 17:09:10.316512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fq5n6-j5d5d" condition "Ready" to 2026-04-08 17:09:10.316497002 +0000 UTC m=+449.099224100 I0408 17:09:10.345966 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:10.345950567 +0000 UTC m=+449.128677665 I0408 17:09:10.369274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fq5n6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:23.806179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:23.806531 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 17:09:23.806510546 +0000 UTC m=+462.589237704 I0408 17:09:23.806752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 17:09:23.806728549 +0000 UTC m=+462.589455667 I0408 17:09:23.825684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:23.825756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:09:23.825773 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 17:09:23.825765823 +0000 UTC m=+462.608492931 I0408 17:09:24.090464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:24.099934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d27nh" condition "Approved" to 2026-04-08 17:09:24.099913848 +0000 UTC m=+462.882640966 I0408 17:09:24.129464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d27nh" condition "Ready" to 2026-04-08 17:09:24.129450163 +0000 UTC m=+462.912177271 I0408 17:09:24.163114 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:24.163099802 +0000 UTC m=+462.945826920 I0408 17:09:24.187522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:24.188057 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:24.188049597 +0000 UTC m=+462.970776705 I0408 17:09:24.216333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:09:24.216697 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:09:24.216686838 +0000 UTC m=+462.999413946 I0408 17:12:34.664637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:12:34.664734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 17:12:34.664722206 +0000 UTC m=+653.447449314 I0408 17:12:34.665043 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 17:12:34.66502405 +0000 UTC m=+653.447751168 I0408 17:12:34.684098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:12:34.684350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:12:34.684417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 17:12:34.684407196 +0000 UTC m=+653.467134314 I0408 17:12:35.214563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:12:35.229381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-csc8w" condition "Approved" to 2026-04-08 17:12:35.22936843 +0000 UTC m=+654.012095548 I0408 17:12:35.252020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-csc8w" condition "Ready" to 2026-04-08 17:12:35.252003529 +0000 UTC m=+654.034730627 I0408 17:12:35.287615 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:12:35.287596231 +0000 UTC m=+654.070323349 I0408 17:12:35.310791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:12:35.311344 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:12:35.311334385 +0000 UTC m=+654.094061503 I0408 17:12:35.332298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:13:17.927491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 17:13:17.927563 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 17:13:17.92752563 +0000 UTC m=+696.710252748 I0408 17:13:17.927999 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 17:13:17.927993257 +0000 UTC m=+696.710720365 I0408 17:13:17.955657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:13:17.955866 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 17:13:17.955854151 +0000 UTC m=+696.738581269 I0408 17:13:18.361967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:13:18.399822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fc9tw" condition "Approved" to 2026-04-08 17:13:18.399803276 +0000 UTC m=+697.182530394 I0408 17:13:18.429216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fc9tw" condition "Ready" to 2026-04-08 17:13:18.42920425 +0000 UTC m=+697.211931368 I0408 17:13:18.457626 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 17:13:18.457607951 +0000 UTC m=+697.240335059 I0408 17:13:18.484141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 17:13:18.536844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"