I0410 13:42:24.505662 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0410 13:42:24.506690 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0410 13:42:24.506886 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0410 13:42:24.511983 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0410 13:42:24.512449 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0410 13:42:24.512502 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0410 13:42:24.512592 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0410 13:42:24.514951 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0410 13:42:24.530197 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0410 13:42:24.533452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0410 13:42:24.533670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0410 13:42:24.538351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0410 13:42:24.541840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0410 13:42:24.544204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0410 13:42:24.546665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0410 13:42:24.548969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0410 13:42:24.550950 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0410 13:42:24.552796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0410 13:42:24.558535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0410 13:42:24.562598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0410 13:42:24.564759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0410 13:42:24.566750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0410 13:42:24.568474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0410 13:42:24.570200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0410 13:42:24.570226 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0410 13:42:24.570448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0410 13:42:24.572116 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0410 13:42:24.572237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0410 13:42:24.574215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0410 13:42:24.575870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0410 13:42:24.580032 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0410 13:42:24.580064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0410 13:42:24.580071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0410 13:42:24.584660 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.584933 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.585137 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.586135 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.596681 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.634126 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.641671 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.660152 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.674817 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:24.679769 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:42:37.327584 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 13:42:37.327568706 +0000 UTC m=+12.853977418 I0410 13:42:38.087270 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 13:42:38.087251457 +0000 UTC m=+13.613660169 I0410 13:42:38.088599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:42:38.088637 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:42:38.088625866 +0000 UTC m=+13.615034578 E0410 13:42:38.104681 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:42:38.104753 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 13:42:38.104747883 +0000 UTC m=+13.631156575 E0410 13:42:38.104776 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:42:38.108869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:42:38.108942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:42:38.108967 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:42:38.108960801 +0000 UTC m=+13.635369493 E0410 13:42:38.121867 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0410 13:42:38.121917 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:42:38.121935 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:42:38.121997 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0410 13:42:38.145609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:42:38.152522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dvwzr" condition "Approved" to 2026-04-10 13:42:38.152516024 +0000 UTC m=+13.678924716 I0410 13:42:38.163937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dvwzr" condition "Ready" to 2026-04-10 13:42:38.163923123 +0000 UTC m=+13.690331845 I0410 13:42:38.185090 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:42:38.185080666 +0000 UTC m=+13.711489358 I0410 13:42:38.201940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:42:38.202707 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:42:38.202698865 +0000 UTC m=+13.729107557 I0410 13:42:38.219915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:42:43.122372 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:42:43.122328821 +0000 UTC m=+18.648737513 I0410 13:43:15.735531 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 13:43:15.735449049 +0000 UTC m=+51.261857771 I0410 13:43:15.736325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:43:15.736363 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 13:43:15.736355145 +0000 UTC m=+51.262763867 I0410 13:43:15.770020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:43:15.770757 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 13:43:15.770743333 +0000 UTC m=+51.297152035 I0410 13:43:15.778641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:43:15.778723 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 13:43:15.778714223 +0000 UTC m=+51.305122915 I0410 13:43:15.980942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:43:15.988988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rzd8f" condition "Approved" to 2026-04-10 13:43:15.988977739 +0000 UTC m=+51.515386431 I0410 13:43:16.020651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rzd8f" condition "Ready" to 2026-04-10 13:43:16.020640527 +0000 UTC m=+51.547049219 I0410 13:43:16.058452 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:43:16.058437942 +0000 UTC m=+51.584846634 I0410 13:43:16.129556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:43:16.129885 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:43:16.1298748 +0000 UTC m=+51.656283492 I0410 13:43:16.158257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:48:42.614628 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Ready" to 2026-04-10 13:48:42.614562377 +0000 UTC m=+378.140971109 I0410 13:48:42.615327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-127.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:48:42.615408 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Issuing" to 2026-04-10 13:48:42.615398166 +0000 UTC m=+378.141806878 I0410 13:48:42.634147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:48:42.634524 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Ready" to 2026-04-10 13:48:42.63450618 +0000 UTC m=+378.160914872 I0410 13:48:42.771390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:48:42.812360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-127.nip.io-tls-th9vq" condition "Approved" to 2026-04-10 13:48:42.812345819 +0000 UTC m=+378.338754511 I0410 13:48:42.847771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-127.nip.io-tls-th9vq" condition "Ready" to 2026-04-10 13:48:42.847756764 +0000 UTC m=+378.374165476 I0410 13:48:42.884175 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:48:42.884162941 +0000 UTC m=+378.410571633 I0410 13:48:42.909857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:48:42.910708 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:48:42.910702453 +0000 UTC m=+378.437111145 I0410 13:48:42.930625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:48:42.931071 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-127.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:48:42.931061656 +0000 UTC m=+378.457470368 I0410 13:49:50.743721 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 13:49:50.743688494 +0000 UTC m=+446.270097186 I0410 13:49:50.744100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:49:50.744210 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 13:49:50.744197994 +0000 UTC m=+446.270606716 I0410 13:49:50.761628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:50.761705 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 13:49:50.761696804 +0000 UTC m=+446.288105496 E0410 13:49:50.764074 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:49:50.764173 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 13:49:50.764165295 +0000 UTC m=+446.290573997 E0410 13:49:50.764371 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:49:50.785280 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0410 13:49:50.785602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:49:50.785691 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:49:50.785791 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0410 13:49:50.793437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:50.816892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lmrls" condition "Approved" to 2026-04-10 13:49:50.81687677 +0000 UTC m=+446.343285462 I0410 13:49:50.832893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lmrls" condition "Ready" to 2026-04-10 13:49:50.83287858 +0000 UTC m=+446.359287262 I0410 13:49:50.861001 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:50.860990588 +0000 UTC m=+446.387399280 I0410 13:49:50.879027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:50.879881 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:50.879869247 +0000 UTC m=+446.406277939 I0410 13:49:50.898513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:50.900333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:55.786232 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:55.7862135 +0000 UTC m=+451.312622212 I0410 13:50:48.385657 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 13:50:48.385613781 +0000 UTC m=+503.912022473 I0410 13:50:48.391226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:50:48.391274 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 13:50:48.391270921 +0000 UTC m=+503.917679593 I0410 13:50:48.391823 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 13:50:48.391819152 +0000 UTC m=+503.918227834 I0410 13:50:48.393718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:50:48.393735 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 13:50:48.393732499 +0000 UTC m=+503.920141181 I0410 13:50:48.394142 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 13:50:48.394138627 +0000 UTC m=+503.920547299 I0410 13:50:48.394322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:50:48.394346 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 13:50:48.394332901 +0000 UTC m=+503.920741583 I0410 13:50:48.451786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:48.451845 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 13:50:48.451838701 +0000 UTC m=+503.978247383 I0410 13:50:48.452185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:48.452221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:50:48.452239 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 13:50:48.452235989 +0000 UTC m=+503.978644671 I0410 13:50:48.452402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:48.452429 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 13:50:48.452426013 +0000 UTC m=+503.978834695 I0410 13:50:48.626429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:48.682481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rqppl" condition "Approved" to 2026-04-10 13:50:48.682462734 +0000 UTC m=+504.208871456 I0410 13:50:48.934872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rqppl" condition "Ready" to 2026-04-10 13:50:48.93485597 +0000 UTC m=+504.461264692 I0410 13:50:49.030571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:49.137847 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:50:49.137836172 +0000 UTC m=+504.664244854 I0410 13:50:49.194195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sxrms" condition "Approved" to 2026-04-10 13:50:49.194184449 +0000 UTC m=+504.720593131 I0410 13:50:49.200978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:49.212228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rxnpz" condition "Approved" to 2026-04-10 13:50:49.2122082 +0000 UTC m=+504.738616882 I0410 13:50:49.296004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rxnpz" condition "Ready" to 2026-04-10 13:50:49.295992701 +0000 UTC m=+504.822401383 I0410 13:50:49.297989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sxrms" condition "Ready" to 2026-04-10 13:50:49.297975719 +0000 UTC m=+504.824384401 I0410 13:50:49.491009 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:50:49.490978616 +0000 UTC m=+505.017387308 I0410 13:50:49.541440 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:50:49.541421978 +0000 UTC m=+505.067830700 E0410 13:50:49.544201 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2m4c5\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0410 13:50:49.568165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:49.646564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:49.766895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:49.767376 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:50:49.767358966 +0000 UTC m=+505.293767648 I0410 13:50:50.044500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:59.874951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" condition "Ready" to 2026-04-10 13:50:59.874927462 +0000 UTC m=+515.401336184 I0410 13:50:59.875433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:50:59.875456 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" condition "Issuing" to 2026-04-10 13:50:59.875451302 +0000 UTC m=+515.401859994 I0410 13:50:59.896058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kmthl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:50:59.896330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" condition "Ready" to 2026-04-10 13:50:59.896319635 +0000 UTC m=+515.422728327 I0410 13:51:00.042617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kmthl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:00.077129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kmthl-fsstx" condition "Approved" to 2026-04-10 13:51:00.077111236 +0000 UTC m=+515.603519938 I0410 13:51:00.102903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kmthl-fsstx" condition "Ready" to 2026-04-10 13:51:00.102889834 +0000 UTC m=+515.629298516 I0410 13:51:00.131464 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:51:00.131451396 +0000 UTC m=+515.657860078 I0410 13:51:00.159442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kmthl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kmthl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:16.040116 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 13:51:16.04009684 +0000 UTC m=+531.566505522 I0410 13:51:16.040371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:51:16.040481 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 13:51:16.040477137 +0000 UTC m=+531.566885819 I0410 13:51:16.067425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:16.067492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:51:16.067508 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 13:51:16.067504043 +0000 UTC m=+531.593912725 I0410 13:51:16.297187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:16.314797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jhn5q" condition "Approved" to 2026-04-10 13:51:16.314779337 +0000 UTC m=+531.841188029 I0410 13:51:16.337823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jhn5q" condition "Ready" to 2026-04-10 13:51:16.337774126 +0000 UTC m=+531.864182818 I0410 13:51:16.373663 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:51:16.373643961 +0000 UTC m=+531.900052643 I0410 13:51:16.391731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:16.392094 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:51:16.392085443 +0000 UTC m=+531.918494125 I0410 13:51:16.413249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:51:16.413734 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:51:16.413724697 +0000 UTC m=+531.940133369 I0410 13:54:39.961847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 13:54:39.961824842 +0000 UTC m=+735.488233554 I0410 13:54:39.961959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:39.961992 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 13:54:39.961982738 +0000 UTC m=+735.488391430 I0410 13:54:39.982594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:39.982850 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 13:54:39.982840445 +0000 UTC m=+735.509249137 I0410 13:54:40.265131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:40.304992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rvd6p" condition "Approved" to 2026-04-10 13:54:40.304972032 +0000 UTC m=+735.831380714 I0410 13:54:40.330430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rvd6p" condition "Ready" to 2026-04-10 13:54:40.330416411 +0000 UTC m=+735.856825093 I0410 13:54:40.371153 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:40.371136189 +0000 UTC m=+735.897544871 I0410 13:54:40.396148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:40.396598 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:40.396589079 +0000 UTC m=+735.922997781 I0410 13:54:40.425070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:55:22.994000 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 13:55:22.993985104 +0000 UTC m=+778.520393816 I0410 13:55:22.994515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:55:22.994577 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 13:55:22.994571267 +0000 UTC m=+778.520979979 I0410 13:55:23.028584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:55:23.028640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:55:23.028668 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 13:55:23.028648912 +0000 UTC m=+778.555057594 I0410 13:55:23.149574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:55:23.157349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h4v4q" condition "Approved" to 2026-04-10 13:55:23.157332348 +0000 UTC m=+778.683741030 I0410 13:55:23.175250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h4v4q" condition "Ready" to 2026-04-10 13:55:23.175237429 +0000 UTC m=+778.701646111 I0410 13:55:23.204713 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:55:23.204689981 +0000 UTC m=+778.731098663 I0410 13:55:23.229025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"