I0420 10:15:04.366071 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:15:04.366233 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:15:04.366345 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:15:04.370730 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:15:04.371203 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:15:04.371378 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:15:04.371376 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:15:04.373976 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:15:04.494615 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:15:04.499985 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:15:04.500071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:15:04.505586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:15:04.509262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:15:04.514447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:15:04.518542 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:15:04.518614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:15:04.520438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:15:04.522287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:15:04.523871 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:15:04.523910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:15:04.525627 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:15:04.525645 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:15:04.525651 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:15:04.525764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:15:04.529293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:15:04.534036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:15:04.536830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:15:04.539962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:15:04.542542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:15:04.545876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:15:04.551706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:15:04.555656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:15:04.560220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:15:04.564169 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.564228 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.565506 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.613268 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.613816 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.614220 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.630341 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.648929 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.655642 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:04.676059 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:15:22.510940 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:15:22.510923485 +0000 UTC m=+18.176796227 I0420 10:15:23.331278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:15:23.331348 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:15:23.331336439 +0000 UTC m=+18.997209201 I0420 10:15:23.331341 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:15:23.331320478 +0000 UTC m=+18.997193250 I0420 10:15:23.484381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:23.484506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:15:23.484532 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:15:23.484526171 +0000 UTC m=+19.150398903 E0420 10:15:23.490234 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:15:23.490314 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:15:23.490304912 +0000 UTC m=+19.156177674 E0420 10:15:23.490383 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:15:23.528970 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:15:23.529400 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:15:23.529453 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:15:23.529582 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:15:23.565452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:23.566228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9kdt6" condition "Approved" to 2026-04-20 10:15:23.566214377 +0000 UTC m=+19.232087149 I0420 10:15:23.583583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9kdt6" condition "Ready" to 2026-04-20 10:15:23.583572831 +0000 UTC m=+19.249445573 I0420 10:15:23.615285 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:23.615266644 +0000 UTC m=+19.281139406 I0420 10:15:23.637173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:23.637760 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:23.637752085 +0000 UTC m=+19.303624827 I0420 10:15:23.669067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:23.669329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:28.529813 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:28.529798712 +0000 UTC m=+24.195671484 I0420 10:15:54.133251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:15:54.133304 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:15:54.133279283 +0000 UTC m=+49.799152025 I0420 10:15:54.133644 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:15:54.133626308 +0000 UTC m=+49.799499050 I0420 10:15:54.286744 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:15:54.286722441 +0000 UTC m=+49.952595183 I0420 10:15:54.290602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:54.290686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:15:54.290710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:15:54.290703699 +0000 UTC m=+49.956576451 I0420 10:15:54.571499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hsgws" condition "Approved" to 2026-04-20 10:15:54.571486371 +0000 UTC m=+50.237359133 I0420 10:15:55.061133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hsgws" condition "Ready" to 2026-04-20 10:15:55.061120446 +0000 UTC m=+50.726993188 I0420 10:15:55.100996 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:55.100982482 +0000 UTC m=+50.766855224 I0420 10:15:55.142737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:55.143534 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:55.143522233 +0000 UTC m=+50.809394995 I0420 10:15:55.164347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:55.167503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:15:55.167755 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:15:55.167749482 +0000 UTC m=+50.833622214 I0420 10:22:35.468410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:35.468482 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-20 10:22:35.46847674 +0000 UTC m=+451.134349462 I0420 10:22:35.468412 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-20 10:22:35.468376865 +0000 UTC m=+451.134249637 I0420 10:22:35.497014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:35.497086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-20 10:22:35.497080019 +0000 UTC m=+451.162952761 I0420 10:22:35.707334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:35.750001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-5crmf" condition "Approved" to 2026-04-20 10:22:35.749961316 +0000 UTC m=+451.415834058 I0420 10:22:35.781322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-5crmf" condition "Ready" to 2026-04-20 10:22:35.781311729 +0000 UTC m=+451.447184481 I0420 10:22:35.834115 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:35.8341024 +0000 UTC m=+451.499975172 I0420 10:22:35.859092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:35.973961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:23:46.637096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:23:46.637155 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:23:46.637139406 +0000 UTC m=+522.303012178 I0420 10:23:46.637407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:23:46.63719763 +0000 UTC m=+522.303070372 I0420 10:23:46.783118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:23:46.783191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:23:46.783211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:23:46.783203023 +0000 UTC m=+522.449075785 E0420 10:23:46.790981 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:23:46.791091 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:23:46.791053422 +0000 UTC m=+522.456926154 E0420 10:23:46.791171 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:23:46.832804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:23:46.833987 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:23:46.834023 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:23:46.834074 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:23:47.072013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:23:47.073079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dlcsb" condition "Approved" to 2026-04-20 10:23:47.073063644 +0000 UTC m=+522.738936386 I0420 10:23:47.231711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dlcsb" condition "Ready" to 2026-04-20 10:23:47.231696818 +0000 UTC m=+522.897569580 I0420 10:23:47.505982 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:23:47.505962357 +0000 UTC m=+523.171835099 I0420 10:23:47.700305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:23:51.836880 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:23:51.836871261 +0000 UTC m=+527.502743993 I0420 10:24:55.674386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:55.674432 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:24:55.674421235 +0000 UTC m=+591.340294007 I0420 10:24:55.678399 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:24:55.67838461 +0000 UTC m=+591.344257342 I0420 10:24:55.678759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:55.678802 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:24:55.678794245 +0000 UTC m=+591.344666967 I0420 10:24:55.679073 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:24:55.679068533 +0000 UTC m=+591.344941265 I0420 10:24:55.679328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:55.679350 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:24:55.6793464 +0000 UTC m=+591.345219132 I0420 10:24:55.679592 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:24:55.679587635 +0000 UTC m=+591.345460367 I0420 10:24:55.763581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:55.763658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:55.763667 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:24:55.76365957 +0000 UTC m=+591.429532302 I0420 10:24:55.763751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:55.764786 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:24:55.764776108 +0000 UTC m=+591.430648850 I0420 10:24:55.764878 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:24:55.764871564 +0000 UTC m=+591.430744296 I0420 10:24:56.211515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.213516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.213900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.544796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b6l26" condition "Approved" to 2026-04-20 10:24:56.532639272 +0000 UTC m=+592.198512004 I0420 10:24:56.697880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c82wh" condition "Approved" to 2026-04-20 10:24:56.697863006 +0000 UTC m=+592.363735778 I0420 10:24:56.767521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9kjqh" condition "Approved" to 2026-04-20 10:24:56.767511622 +0000 UTC m=+592.433384364 I0420 10:24:56.769834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b6l26" condition "Ready" to 2026-04-20 10:24:56.769820945 +0000 UTC m=+592.435693697 I0420 10:24:56.772219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c82wh" condition "Ready" to 2026-04-20 10:24:56.772208882 +0000 UTC m=+592.438081634 I0420 10:24:56.908999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9kjqh" condition "Ready" to 2026-04-20 10:24:56.908989968 +0000 UTC m=+592.574862710 I0420 10:24:57.543392 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:57.543379647 +0000 UTC m=+593.209252379 I0420 10:24:57.543782 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:57.543769461 +0000 UTC m=+593.209642223 I0420 10:24:57.642875 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:57.642844638 +0000 UTC m=+593.308717410 I0420 10:24:57.650581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:57.653280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:57.712993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:57.713591 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:57.713582543 +0000 UTC m=+593.379455285 I0420 10:24:57.848176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:57.977745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:58.234058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:58.234863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:15.721026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:15.721061 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" condition "Issuing" to 2026-04-20 10:25:15.72105372 +0000 UTC m=+611.386926462 I0420 10:25:15.722433 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" condition "Ready" to 2026-04-20 10:25:15.722424795 +0000 UTC m=+611.388297547 I0420 10:25:15.737234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:15.738382 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" condition "Ready" to 2026-04-20 10:25:15.738358377 +0000 UTC m=+611.404231149 I0420 10:25:16.182996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:17.159860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7ngm7-dvlpm" condition "Approved" to 2026-04-20 10:25:17.159848903 +0000 UTC m=+612.825721645 I0420 10:25:17.344894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7ngm7-dvlpm" condition "Ready" to 2026-04-20 10:25:17.344883024 +0000 UTC m=+613.010755766 I0420 10:25:17.619855 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:17.619838574 +0000 UTC m=+613.285711336 I0420 10:25:17.657574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:23.345854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7ngm7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:58.336973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:58.337135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:25:58.337104864 +0000 UTC m=+654.002977636 I0420 10:25:58.339154 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:25:58.339138668 +0000 UTC m=+654.005011390 I0420 10:25:58.360966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:58.361084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:58.361220 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:25:58.361209307 +0000 UTC m=+654.027082079 I0420 10:25:58.903783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:58.922297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qzwb8" condition "Approved" to 2026-04-20 10:25:58.922287923 +0000 UTC m=+654.588160655 I0420 10:25:58.948739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qzwb8" condition "Ready" to 2026-04-20 10:25:58.948724994 +0000 UTC m=+654.614597736 I0420 10:25:59.054298 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:59.054282875 +0000 UTC m=+654.720155607 I0420 10:25:59.083278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:59.083836 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:59.08382451 +0000 UTC m=+654.749697252 I0420 10:25:59.975331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:29:47.689222 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:29:47.689180574 +0000 UTC m=+883.355053316 I0420 10:29:47.689503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:29:47.689584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:29:47.689573103 +0000 UTC m=+883.355445865 I0420 10:29:47.745797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:29:47.745894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:29:47.745887257 +0000 UTC m=+883.411759999 I0420 10:29:48.176607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:29:48.233597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2l97h" condition "Approved" to 2026-04-20 10:29:48.233584719 +0000 UTC m=+883.899457461 I0420 10:29:48.262621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2l97h" condition "Ready" to 2026-04-20 10:29:48.262609542 +0000 UTC m=+883.928482274 I0420 10:29:48.302556 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:29:48.302542059 +0000 UTC m=+883.968414821 I0420 10:29:48.334083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:29:48.334348 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:29:48.334342301 +0000 UTC m=+884.000215033 I0420 10:29:48.529629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:10.341935 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 10:31:10.341912317 +0000 UTC m=+966.007785109 I0420 10:31:10.342624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:10.342856 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 10:31:10.342842767 +0000 UTC m=+966.008715539 I0420 10:31:10.417759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:10.417834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:10.417850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 10:31:10.417844895 +0000 UTC m=+966.083717627 I0420 10:31:10.573107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qkpbj" condition "Approved" to 2026-04-20 10:31:10.573091006 +0000 UTC m=+966.238963778 I0420 10:31:10.659167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qkpbj" condition "Ready" to 2026-04-20 10:31:10.659153471 +0000 UTC m=+966.325026223 I0420 10:31:10.856032 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:10.856011908 +0000 UTC m=+966.521884660 I0420 10:31:10.884968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:10.885327 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:10.885318313 +0000 UTC m=+966.551191045 I0420 10:31:10.982752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:10.983021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"