I0427 12:02:10.110230 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 12:02:10.110333 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 12:02:10.110451 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 12:02:10.114062 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 12:02:10.114575 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 12:02:10.114683 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 12:02:10.114683 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 12:02:10.120487 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 12:02:10.134489 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 12:02:10.138411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 12:02:10.141121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 12:02:10.143686 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 12:02:10.143974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 12:02:10.147111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 12:02:10.147197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 12:02:10.154971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 12:02:10.159960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 12:02:10.163941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 12:02:10.166302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 12:02:10.168165 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 12:02:10.168371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 12:02:10.170465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 12:02:10.172175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 12:02:10.175835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 12:02:10.181019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 12:02:10.186109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 12:02:10.189623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 12:02:10.189754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 12:02:10.193058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 12:02:10.195332 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 12:02:10.196305 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 12:02:10.195429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 12:02:10.201061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 12:02:10.205139 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.205301 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.205874 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.207384 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.225615 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.247511 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.268686 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.279902 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.294410 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:10.304234 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:02:21.847522 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 12:02:21.847506954 +0000 UTC m=+11.770647242 I0427 12:02:22.583175 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:02:22.583154839 +0000 UTC m=+12.506295187 I0427 12:02:22.583347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:02:22.583484 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 12:02:22.583442948 +0000 UTC m=+12.506583276 E0427 12:02:22.600523 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:02:22.600563 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 12:02:22.60055664 +0000 UTC m=+12.523696908 E0427 12:02:22.600580 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:02:22.607778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:22.607855 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:02:22.607848754 +0000 UTC m=+12.530989022 E0427 12:02:22.610797 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 12:02:22.610845 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:02:22.610861 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:02:22.610881 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 12:02:22.625178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:22.647686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ml54s" condition "Approved" to 2026-04-27 12:02:22.647675632 +0000 UTC m=+12.570815920 I0427 12:02:22.661443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ml54s" condition "Ready" to 2026-04-27 12:02:22.661431185 +0000 UTC m=+12.584571473 I0427 12:02:22.725986 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:02:22.725970247 +0000 UTC m=+12.649110525 I0427 12:02:22.747171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:22.796603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:27.611519 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:02:27.611506393 +0000 UTC m=+17.534646671 I0427 12:02:52.644959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:02:52.645059 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 12:02:52.645032412 +0000 UTC m=+42.568172700 I0427 12:02:52.645484 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 12:02:52.645474343 +0000 UTC m=+42.568614631 I0427 12:02:52.672886 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 12:02:52.672863367 +0000 UTC m=+42.596003685 I0427 12:02:52.680763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:52.680876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:02:52.680963 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 12:02:52.680954689 +0000 UTC m=+42.604094967 I0427 12:02:52.847607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:02:52.866655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6hrtn" condition "Approved" to 2026-04-27 12:02:52.866639366 +0000 UTC m=+42.789779694 I0427 12:02:52.899010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6hrtn" condition "Ready" to 2026-04-27 12:02:52.898999172 +0000 UTC m=+42.822139460 I0427 12:02:52.924395 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:02:52.924379462 +0000 UTC m=+42.847519750 I0427 12:02:52.946014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:07:53.273690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready" to 2026-04-27 12:07:53.273654132 +0000 UTC m=+343.196794460 I0427 12:07:53.273978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-103.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:07:53.274161 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Issuing" to 2026-04-27 12:07:53.274085793 +0000 UTC m=+343.197226101 I0427 12:07:53.291842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:07:53.291947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-103.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:07:53.292089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Issuing" to 2026-04-27 12:07:53.292081869 +0000 UTC m=+343.215222187 I0427 12:07:53.444991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-hx88b" condition "Approved" to 2026-04-27 12:07:53.444980154 +0000 UTC m=+343.368120442 I0427 12:07:53.473807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-hx88b" condition "Ready" to 2026-04-27 12:07:53.473798203 +0000 UTC m=+343.396938481 I0427 12:07:53.568654 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:53.568641342 +0000 UTC m=+343.491781620 I0427 12:07:53.593412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:07:53.643965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:00.066129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:00.066387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 12:09:00.066376601 +0000 UTC m=+409.989516879 I0427 12:09:00.066296 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:09:00.066270799 +0000 UTC m=+409.989411087 I0427 12:09:00.080508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:00.080625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:09:00.080615189 +0000 UTC m=+410.003755477 E0427 12:09:00.087834 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:09:00.087887 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 12:09:00.087876777 +0000 UTC m=+410.011017085 E0427 12:09:00.087951 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:09:00.097910 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 12:09:00.098363 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:09:00.098479 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:09:00.098615 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 12:09:00.102415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:00.128848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kfsgl" condition "Approved" to 2026-04-27 12:09:00.128825406 +0000 UTC m=+410.051965744 I0427 12:09:00.141721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kfsgl" condition "Ready" to 2026-04-27 12:09:00.141711137 +0000 UTC m=+410.064851425 I0427 12:09:00.168848 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:00.168835036 +0000 UTC m=+410.091975344 I0427 12:09:00.187004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:05.099081 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:05.099069987 +0000 UTC m=+415.022210265 I0427 12:09:46.490364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:46.490450 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:09:46.490420859 +0000 UTC m=+456.413561147 I0427 12:09:46.490775 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 12:09:46.490770195 +0000 UTC m=+456.413910483 I0427 12:09:46.509484 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 12:09:46.509473282 +0000 UTC m=+456.432613560 I0427 12:09:46.509761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:46.509781 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:09:46.509778277 +0000 UTC m=+456.432918545 I0427 12:09:46.509832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:46.509885 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 12:09:46.509880219 +0000 UTC m=+456.433020497 I0427 12:09:46.509917 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 12:09:46.509913299 +0000 UTC m=+456.433053577 I0427 12:09:46.542008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.542046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:46.542059 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:09:46.542054824 +0000 UTC m=+456.465195102 I0427 12:09:46.544915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.544943 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 12:09:46.544940008 +0000 UTC m=+456.468080286 I0427 12:09:46.545116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.545195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:46.545208 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:09:46.545205633 +0000 UTC m=+456.468345911 I0427 12:09:46.701621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.733658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kwhcg" condition "Approved" to 2026-04-27 12:09:46.733643489 +0000 UTC m=+456.656783767 I0427 12:09:46.753044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kwhcg" condition "Ready" to 2026-04-27 12:09:46.753035988 +0000 UTC m=+456.676176266 I0427 12:09:46.779171 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:46.779153901 +0000 UTC m=+456.702294219 I0427 12:09:46.813602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.814365 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:46.814357002 +0000 UTC m=+456.737497300 I0427 12:09:46.834676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.842276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:46.848136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4pqpl" condition "Approved" to 2026-04-27 12:09:46.848115638 +0000 UTC m=+456.771255926 E0427 12:09:46.853874 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-hvb6w\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0427 12:09:46.870708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4pqpl" condition "Ready" to 2026-04-27 12:09:46.870697546 +0000 UTC m=+456.793837834 I0427 12:09:46.976136 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:46.976120406 +0000 UTC m=+456.899260724 I0427 12:09:47.174969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:47.175354 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:47.175348207 +0000 UTC m=+457.098488505 I0427 12:09:47.230284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6fctv" condition "Approved" to 2026-04-27 12:09:47.230275101 +0000 UTC m=+457.153415379 I0427 12:09:47.789733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6fctv" condition "Ready" to 2026-04-27 12:09:47.789696766 +0000 UTC m=+457.712837044 I0427 12:09:47.865687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:47.875184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:48.123387 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:48.123347655 +0000 UTC m=+458.046487963 I0427 12:09:48.221869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:48.222443 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:48.222432303 +0000 UTC m=+458.145572591 I0427 12:09:48.476680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:48.520509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:55.354047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:55.354082 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" condition "Issuing" to 2026-04-27 12:09:55.354074126 +0000 UTC m=+465.277214414 I0427 12:09:55.354470 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" condition "Ready" to 2026-04-27 12:09:55.354465043 +0000 UTC m=+465.277605331 I0427 12:09:55.381651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vblxw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:55.381717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:09:55.381732 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" condition "Issuing" to 2026-04-27 12:09:55.38172814 +0000 UTC m=+465.304868418 I0427 12:09:55.518535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vblxw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:55.529324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vblxw-d9bvm" condition "Approved" to 2026-04-27 12:09:55.528148119 +0000 UTC m=+465.451288407 I0427 12:09:55.550310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vblxw-d9bvm" condition "Ready" to 2026-04-27 12:09:55.550292084 +0000 UTC m=+465.473432362 I0427 12:09:55.578488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:55.578476487 +0000 UTC m=+465.501616765 I0427 12:09:55.592446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vblxw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:09:55.592683 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:09:55.592678526 +0000 UTC m=+465.515818794 I0427 12:09:55.611190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vblxw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vblxw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:10:13.945025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:10:13.945072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 12:10:13.945056424 +0000 UTC m=+483.868196722 I0427 12:10:13.945489 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 12:10:13.945479591 +0000 UTC m=+483.868619889 I0427 12:10:13.966541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:10:13.966697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:10:13.966802 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 12:10:13.96679261 +0000 UTC m=+483.889932918 I0427 12:10:14.146042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7g4k4" condition "Approved" to 2026-04-27 12:10:14.146030006 +0000 UTC m=+484.069170294 I0427 12:10:14.167479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7g4k4" condition "Ready" to 2026-04-27 12:10:14.167465805 +0000 UTC m=+484.090606083 I0427 12:10:14.197493 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:10:14.197478946 +0000 UTC m=+484.120619234 I0427 12:10:14.216320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:10:14.216622 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:10:14.216616745 +0000 UTC m=+484.139757013 I0427 12:10:14.233926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:13:27.985101 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 12:13:27.985084393 +0000 UTC m=+677.908224661 I0427 12:13:27.985518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:13:27.985565 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 12:13:27.98556099 +0000 UTC m=+677.908701268 I0427 12:13:28.004692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:13:28.004810 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 12:13:28.004800602 +0000 UTC m=+677.927940900 I0427 12:13:28.221095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:13:28.253470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lwgxq" condition "Approved" to 2026-04-27 12:13:28.253454759 +0000 UTC m=+678.176595047 I0427 12:13:28.271959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lwgxq" condition "Ready" to 2026-04-27 12:13:28.271946221 +0000 UTC m=+678.195086509 I0427 12:13:28.309098 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:13:28.309084585 +0000 UTC m=+678.232224873 I0427 12:13:28.328093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:13:28.328351 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:13:28.328345607 +0000 UTC m=+678.251485885 I0427 12:13:28.348172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:14:14.358240 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 12:14:14.358224674 +0000 UTC m=+724.281364962 I0427 12:14:14.358333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:14:14.358362 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 12:14:14.358354196 +0000 UTC m=+724.281494514 I0427 12:14:14.659488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:14:14.660096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:14:14.660163 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 12:14:14.660154346 +0000 UTC m=+724.583294644 I0427 12:14:15.431375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:14:15.471894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bbt25" condition "Approved" to 2026-04-27 12:14:15.471880021 +0000 UTC m=+725.395020329 I0427 12:14:15.921128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bbt25" condition "Ready" to 2026-04-27 12:14:15.921116988 +0000 UTC m=+725.844257266 I0427 12:14:16.433787 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:14:16.433772532 +0000 UTC m=+726.356912870 I0427 12:14:16.547296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:14:16.547610 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:14:16.547603235 +0000 UTC m=+726.470743513 I0427 12:14:17.029970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"