I0428 17:12:29.504649 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 17:12:29.504824 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 17:12:29.504947 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 17:12:29.510140 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 17:12:29.510627 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 17:12:29.510714 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 17:12:29.510835 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 17:12:29.513415 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 17:12:29.531418 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 17:12:29.537756 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 17:12:29.537782 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 17:12:29.538196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 17:12:29.540811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 17:12:29.547671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 17:12:29.550405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 17:12:29.553013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 17:12:29.555714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 17:12:29.558179 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 17:12:29.558365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 17:12:29.560458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 17:12:29.565167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 17:12:29.569609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 17:12:29.572069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 17:12:29.574196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 17:12:29.576612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 17:12:29.578921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 17:12:29.580745 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 17:12:29.580825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 17:12:29.582827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 17:12:29.585192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 17:12:29.588297 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 17:12:29.588364 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 17:12:29.589063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 17:12:29.592386 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.592764 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.594001 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.614356 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.626364 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.643298 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.657702 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.675004 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.685632 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:29.694778 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 17:12:41.868972 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 17:12:41.868956038 +0000 UTC m=+12.402348727 I0428 17:12:42.636759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:12:42.636840 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 17:12:42.636831155 +0000 UTC m=+13.170223844 I0428 17:12:42.636955 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 17:12:42.636932066 +0000 UTC m=+13.170324785 I0428 17:12:42.652559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:12:42.652627 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 17:12:42.652618924 +0000 UTC m=+13.186011593 E0428 17:12:42.658834 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 17:12:42.658877 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 17:12:42.658872615 +0000 UTC m=+13.192265294 E0428 17:12:42.658895 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 17:12:42.670910 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 17:12:42.671010 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 17:12:42.671031 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 17:12:42.671058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 17:12:42.673618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:12:42.699224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7mwwv" condition "Approved" to 2026-04-28 17:12:42.699203585 +0000 UTC m=+13.232596294 I0428 17:12:42.713453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7mwwv" condition "Ready" to 2026-04-28 17:12:42.713435375 +0000 UTC m=+13.246828054 I0428 17:12:42.743765 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:12:42.743750298 +0000 UTC m=+13.277142987 I0428 17:12:42.770588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:12:42.818048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:12:47.672317 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:12:47.672306782 +0000 UTC m=+18.205699461 I0428 17:13:10.162889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:13:10.162807 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 17:13:10.162768412 +0000 UTC m=+40.696161111 I0428 17:13:10.162949 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 17:13:10.162936732 +0000 UTC m=+40.696329421 I0428 17:13:10.182538 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 17:13:10.182096647 +0000 UTC m=+40.715489336 I0428 17:13:10.206249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:13:10.206383 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 17:13:10.206376221 +0000 UTC m=+40.739768900 I0428 17:13:10.326474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:13:10.368439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqb7g" condition "Approved" to 2026-04-28 17:13:10.368403858 +0000 UTC m=+40.901796557 I0428 17:13:10.400701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqb7g" condition "Ready" to 2026-04-28 17:13:10.400679106 +0000 UTC m=+40.934071825 I0428 17:13:10.436830 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:13:10.436807874 +0000 UTC m=+40.970200593 I0428 17:13:10.471315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:13:10.544275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:17:41.748478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:17:41.748581 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-28 17:17:41.748534802 +0000 UTC m=+312.281927521 I0428 17:17:41.749156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-28 17:17:41.748460422 +0000 UTC m=+312.281853131 I0428 17:17:41.771018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:17:41.771503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-28 17:17:41.771493218 +0000 UTC m=+312.304885906 I0428 17:17:42.030561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:17:42.063022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-p6jl7" condition "Approved" to 2026-04-28 17:17:42.063008252 +0000 UTC m=+312.596400941 I0428 17:17:42.093088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-p6jl7" condition "Ready" to 2026-04-28 17:17:42.093074186 +0000 UTC m=+312.626466875 I0428 17:17:42.127245 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:17:42.127230556 +0000 UTC m=+312.660623245 I0428 17:17:42.154050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:17:42.154547 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:17:42.154538703 +0000 UTC m=+312.687931392 I0428 17:17:42.178546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:17:42.178907 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:17:42.178897149 +0000 UTC m=+312.712289838 I0428 17:18:47.360161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:18:47.360488 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 17:18:47.360255934 +0000 UTC m=+377.893648643 I0428 17:18:47.360769 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 17:18:47.36020489 +0000 UTC m=+377.893597579 E0428 17:18:47.374763 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 17:18:47.374817 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 17:18:47.374807017 +0000 UTC m=+377.908199706 E0428 17:18:47.374874 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 17:18:47.378419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:18:47.378543 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 17:18:47.378528115 +0000 UTC m=+377.911920794 E0428 17:18:47.387154 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 17:18:47.387744 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 17:18:47.387798 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 17:18:47.387832 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 17:18:47.397503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:18:47.397633 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 17:18:47.397624318 +0000 UTC m=+377.931017007 I0428 17:18:47.400523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:18:47.400764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6rps4" condition "Approved" to 2026-04-28 17:18:47.400747417 +0000 UTC m=+377.934140116 I0428 17:18:47.406924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 17:18:47.406908736 +0000 UTC m=+377.940301425 I0428 17:18:47.415617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:18:47.416950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6rps4" condition "Ready" to 2026-04-28 17:18:47.416934446 +0000 UTC m=+377.950327135 I0428 17:18:47.440485 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:18:47.440466093 +0000 UTC m=+377.973858832 I0428 17:18:47.464644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:18:52.388228 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:18:52.388211921 +0000 UTC m=+382.921604630 I0428 17:19:34.992569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:34.992666 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 17:19:34.992637007 +0000 UTC m=+425.526029676 I0428 17:19:34.993206 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 17:19:34.993201297 +0000 UTC m=+425.526593976 I0428 17:19:34.998875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:34.998914 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 17:19:34.998905629 +0000 UTC m=+425.532298308 I0428 17:19:34.999710 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 17:19:34.99969934 +0000 UTC m=+425.533092019 I0428 17:19:35.013982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:35.014026 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 17:19:35.014016218 +0000 UTC m=+425.547408897 I0428 17:19:35.014784 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 17:19:35.014768481 +0000 UTC m=+425.548161150 I0428 17:19:35.031767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.031818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:35.031917 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 17:19:35.031910468 +0000 UTC m=+425.565303147 I0428 17:19:35.037133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.037173 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 17:19:35.037169553 +0000 UTC m=+425.570562232 I0428 17:19:35.037974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.038066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:35.038100 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 17:19:35.038092071 +0000 UTC m=+425.571484760 I0428 17:19:35.217127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.234861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p5hx7" condition "Approved" to 2026-04-28 17:19:35.234846787 +0000 UTC m=+425.768239466 I0428 17:19:35.242119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.257115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p5hx7" condition "Ready" to 2026-04-28 17:19:35.257099584 +0000 UTC m=+425.790492253 I0428 17:19:35.291360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5vj6q" condition "Approved" to 2026-04-28 17:19:35.29134855 +0000 UTC m=+425.824741229 I0428 17:19:35.297655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bxt8m" condition "Approved" to 2026-04-28 17:19:35.297648828 +0000 UTC m=+425.831041507 I0428 17:19:35.312790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5vj6q" condition "Ready" to 2026-04-28 17:19:35.312765456 +0000 UTC m=+425.846158135 I0428 17:19:35.328861 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:35.328845539 +0000 UTC m=+425.862238218 I0428 17:19:35.329395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bxt8m" condition "Ready" to 2026-04-28 17:19:35.329389191 +0000 UTC m=+425.862781870 I0428 17:19:35.558917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:35.559336 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:35.55932901 +0000 UTC m=+426.092721689 I0428 17:19:35.898350 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:35.898331721 +0000 UTC m=+426.431724400 I0428 17:19:36.027095 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:36.027064356 +0000 UTC m=+426.560457045 I0428 17:19:36.059402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.110693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.207464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.208082 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:36.208072065 +0000 UTC m=+426.741464784 I0428 17:19:36.305874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.306591 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:36.306581293 +0000 UTC m=+426.839973982 I0428 17:19:36.760786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.808057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:36.859167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:43.209298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" condition "Ready" to 2026-04-28 17:19:43.209280673 +0000 UTC m=+433.742673362 I0428 17:19:43.209860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:43.209982 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" condition "Issuing" to 2026-04-28 17:19:43.209945746 +0000 UTC m=+433.743338435 I0428 17:19:43.223322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fb45k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:43.223449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:43.223496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" condition "Issuing" to 2026-04-28 17:19:43.223486907 +0000 UTC m=+433.756879586 I0428 17:19:43.494391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fb45k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:43.505058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fb45k-569gd" condition "Approved" to 2026-04-28 17:19:43.505042034 +0000 UTC m=+434.038434713 I0428 17:19:43.528377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fb45k-569gd" condition "Ready" to 2026-04-28 17:19:43.528366828 +0000 UTC m=+434.061759507 I0428 17:19:43.587263 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:43.587243681 +0000 UTC m=+434.120636360 I0428 17:19:43.612975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fb45k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fb45k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:57.989947 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 17:19:57.989916388 +0000 UTC m=+448.523309057 I0428 17:19:57.990454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:57.990480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 17:19:57.990478171 +0000 UTC m=+448.523870850 I0428 17:19:58.142667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:19:58.143041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:19:58.143064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 17:19:58.143058819 +0000 UTC m=+448.676451488 I0428 17:19:58.462810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lmvd7" condition "Approved" to 2026-04-28 17:19:58.462801762 +0000 UTC m=+448.996194441 I0428 17:19:58.485126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lmvd7" condition "Ready" to 2026-04-28 17:19:58.485102749 +0000 UTC m=+449.018495428 I0428 17:19:58.518936 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:19:58.518920288 +0000 UTC m=+449.052312967 I0428 17:19:58.540043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:23:32.981326 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 17:23:32.981278132 +0000 UTC m=+663.514670811 I0428 17:23:32.981951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:23:32.981990 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 17:23:32.981982086 +0000 UTC m=+663.515374775 I0428 17:23:32.998561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:23:32.998628 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 17:23:32.998621349 +0000 UTC m=+663.532014038 I0428 17:23:33.122646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:23:33.206201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7rngz" condition "Approved" to 2026-04-28 17:23:33.206187997 +0000 UTC m=+663.739580716 I0428 17:23:33.251043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7rngz" condition "Ready" to 2026-04-28 17:23:33.251027944 +0000 UTC m=+663.784420633 I0428 17:23:33.280444 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:23:33.280427821 +0000 UTC m=+663.813820500 I0428 17:23:33.308460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.148234 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 17:24:16.148207422 +0000 UTC m=+706.681600101 I0428 17:24:16.148531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:24:16.148582 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 17:24:16.148578591 +0000 UTC m=+706.681971270 I0428 17:24:16.174975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.175247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 17:24:16.175306 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 17:24:16.17529699 +0000 UTC m=+706.708689669 I0428 17:24:16.392060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.409318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-krwml" condition "Approved" to 2026-04-28 17:24:16.409302505 +0000 UTC m=+706.942695184 I0428 17:24:16.440126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-krwml" condition "Ready" to 2026-04-28 17:24:16.440113824 +0000 UTC m=+706.973506513 I0428 17:24:16.473164 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:24:16.473136786 +0000 UTC m=+707.006529475 I0428 17:24:16.492655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.493160 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:24:16.493153423 +0000 UTC m=+707.026546112 I0428 17:24:16.512749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.514012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 17:24:16.514329 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 17:24:16.514319977 +0000 UTC m=+707.047712656