I0422 19:40:37.432988 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0422 19:40:37.433228 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0422 19:40:37.433377 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0422 19:40:37.438734 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0422 19:40:37.439318 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0422 19:40:37.439399 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0422 19:40:37.439403 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0422 19:40:37.441266 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0422 19:40:37.456656 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0422 19:40:37.456877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0422 19:40:37.461607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0422 19:40:37.464631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0422 19:40:37.470061 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0422 19:40:37.470103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0422 19:40:37.472659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0422 19:40:37.475591 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0422 19:40:37.477835 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0422 19:40:37.477864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0422 19:40:37.479827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0422 19:40:37.481600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0422 19:40:37.483738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0422 19:40:37.490602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0422 19:40:37.494738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0422 19:40:37.498357 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0422 19:40:37.498388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0422 19:40:37.498449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0422 19:40:37.500771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0422 19:40:37.502772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0422 19:40:37.504645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0422 19:40:37.506763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0422 19:40:37.508736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0422 19:40:37.510911 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0422 19:40:37.512337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0422 19:40:37.513663 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.515886 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.517016 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.517375 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.517571 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.518058 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.518527 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.518824 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.518893 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:37.618462 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 19:40:51.535272 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 19:40:51.535252421 +0000 UTC m=+14.133079976 I0422 19:40:52.241342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:40:52.241417 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 19:40:52.241402533 +0000 UTC m=+14.839230048 I0422 19:40:52.241440 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 19:40:52.241431203 +0000 UTC m=+14.839258718 E0422 19:40:52.255106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 19:40:52.255451 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 19:40:52.255437063 +0000 UTC m=+14.853264578 E0422 19:40:52.255590 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 19:40:52.262267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:40:52.262501 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 19:40:52.262469853 +0000 UTC m=+14.860297378 E0422 19:40:52.269111 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0422 19:40:52.269433 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 19:40:52.269572 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 19:40:52.269722 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0422 19:40:52.281999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:40:52.309402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fg87g" condition "Approved" to 2026-04-22 19:40:52.309389554 +0000 UTC m=+14.907217069 I0422 19:40:52.323230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fg87g" condition "Ready" to 2026-04-22 19:40:52.323217943 +0000 UTC m=+14.921045448 I0422 19:40:52.348846 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:40:52.348832412 +0000 UTC m=+14.946659927 I0422 19:40:52.376517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:40:52.376993 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:40:52.376981213 +0000 UTC m=+14.974808748 I0422 19:40:52.383080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:40:52.394070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:40:52.394516 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:40:52.394507557 +0000 UTC m=+14.992335062 I0422 19:40:57.270432 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:40:57.270415172 +0000 UTC m=+19.868242717 I0422 19:41:35.331546 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 19:41:35.331530294 +0000 UTC m=+57.929357819 I0422 19:41:35.331881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:41:35.331914 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 19:41:35.331908673 +0000 UTC m=+57.929736188 I0422 19:41:35.344347 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 19:41:35.344333455 +0000 UTC m=+57.942160980 I0422 19:41:35.365473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:41:35.365539 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 19:41:35.365533154 +0000 UTC m=+57.963360669 I0422 19:41:35.564211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:41:35.599937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2mvf8" condition "Approved" to 2026-04-22 19:41:35.599924561 +0000 UTC m=+58.197752076 I0422 19:41:35.680350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2mvf8" condition "Ready" to 2026-04-22 19:41:35.680339604 +0000 UTC m=+58.278167119 I0422 19:41:35.713499 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:41:35.713479807 +0000 UTC m=+58.311307352 I0422 19:41:35.736238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:41:35.736546 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:41:35.736534779 +0000 UTC m=+58.334362294 I0422 19:41:35.751646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:41:35.765853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:48:55.042252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:48:55.042315 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-22 19:48:55.042307518 +0000 UTC m=+497.640135033 I0422 19:48:55.042558 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-22 19:48:55.042545217 +0000 UTC m=+497.640372732 I0422 19:48:55.102310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:48:55.102387 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-22 19:48:55.10237858 +0000 UTC m=+497.700206085 I0422 19:48:55.478273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:48:55.800844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-nx8vx" condition "Approved" to 2026-04-22 19:48:55.800833081 +0000 UTC m=+498.398660596 I0422 19:48:56.035324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-nx8vx" condition "Ready" to 2026-04-22 19:48:56.03531021 +0000 UTC m=+498.633137745 I0422 19:48:56.111582 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:48:56.11156477 +0000 UTC m=+498.709392305 I0422 19:48:56.168221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:48:56.168964 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:48:56.168953965 +0000 UTC m=+498.766781500 I0422 19:48:56.202605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:50:05.190607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:50:05.190653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 19:50:05.190642333 +0000 UTC m=+567.788469848 I0422 19:50:05.191497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 19:50:05.190541974 +0000 UTC m=+567.788369519 I0422 19:50:05.207222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:50:05.207314 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 19:50:05.207305292 +0000 UTC m=+567.805132807 E0422 19:50:05.385165 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 19:50:05.385217 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-22 19:50:05.385207772 +0000 UTC m=+567.983035307 E0422 19:50:05.385271 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 19:50:05.601470 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0422 19:50:05.601694 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 19:50:05.601805 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 19:50:05.602008 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0422 19:50:05.615991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:50:05.669388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plgnd" condition "Approved" to 2026-04-22 19:50:05.66936702 +0000 UTC m=+568.267194615 I0422 19:50:05.709458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plgnd" condition "Ready" to 2026-04-22 19:50:05.709447243 +0000 UTC m=+568.307274758 I0422 19:50:05.777251 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:50:05.777233229 +0000 UTC m=+568.375060774 I0422 19:50:05.957580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:50:05.958023 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:50:05.958014499 +0000 UTC m=+568.555842014 I0422 19:50:06.077238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:50:10.602654 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:50:10.602643959 +0000 UTC m=+573.200471474 I0422 19:51:02.039667 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-22 19:51:02.039654814 +0000 UTC m=+624.637482369 I0422 19:51:02.040531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.040558 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 19:51:02.040552648 +0000 UTC m=+624.638380183 I0422 19:51:02.046141 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 19:51:02.046130908 +0000 UTC m=+624.643958413 I0422 19:51:02.048266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.048294 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 19:51:02.048288662 +0000 UTC m=+624.646116187 I0422 19:51:02.050476 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 19:51:02.050399487 +0000 UTC m=+624.648226992 I0422 19:51:02.051028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.051047 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 19:51:02.051044292 +0000 UTC m=+624.648871797 I0422 19:51:02.087769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:02.087834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.087854 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 19:51:02.087849217 +0000 UTC m=+624.685676722 I0422 19:51:02.088247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:02.088650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.088672 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 19:51:02.088666461 +0000 UTC m=+624.686493966 I0422 19:51:02.089845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:02.090496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:02.090532 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 19:51:02.090525417 +0000 UTC m=+624.688352922 I0422 19:51:02.466064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:02.466817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nwtmq" condition "Approved" to 2026-04-22 19:51:02.466810023 +0000 UTC m=+625.064637538 I0422 19:51:02.515863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x9l7k" condition "Approved" to 2026-04-22 19:51:02.515837069 +0000 UTC m=+625.113664594 I0422 19:51:02.516427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vxv5f" condition "Approved" to 2026-04-22 19:51:02.516419694 +0000 UTC m=+625.114247199 I0422 19:51:02.517109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nwtmq" condition "Ready" to 2026-04-22 19:51:02.51710014 +0000 UTC m=+625.114927665 I0422 19:51:02.576317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x9l7k" condition "Ready" to 2026-04-22 19:51:02.576300333 +0000 UTC m=+625.174127858 I0422 19:51:02.577073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vxv5f" condition "Ready" to 2026-04-22 19:51:02.577061767 +0000 UTC m=+625.174889282 I0422 19:51:02.610936 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:02.610894253 +0000 UTC m=+625.208721768 I0422 19:51:02.761494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:02.795307 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:02.795298953 +0000 UTC m=+625.393126448 I0422 19:51:02.818369 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:02.818358146 +0000 UTC m=+625.416185661 I0422 19:51:03.131024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:03.131662 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:03.131651266 +0000 UTC m=+625.729478801 I0422 19:51:03.218226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:03.557138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:03.618347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:29.844863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" condition "Ready" to 2026-04-22 19:51:29.844844389 +0000 UTC m=+652.442671904 I0422 19:51:29.845426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:51:29.845577 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" condition "Issuing" to 2026-04-22 19:51:29.845569673 +0000 UTC m=+652.443397188 I0422 19:51:29.866974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-95qk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:29.867038 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" condition "Ready" to 2026-04-22 19:51:29.867032205 +0000 UTC m=+652.464859710 I0422 19:51:30.079923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-95qk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:30.117734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-95qk5-fs2pm" condition "Approved" to 2026-04-22 19:51:30.117724272 +0000 UTC m=+652.715551777 I0422 19:51:30.143750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-95qk5-fs2pm" condition "Ready" to 2026-04-22 19:51:30.143738799 +0000 UTC m=+652.741566314 I0422 19:51:30.179795 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:30.179778872 +0000 UTC m=+652.777606377 I0422 19:51:30.201686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-95qk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:51:30.202422 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:51:30.202414395 +0000 UTC m=+652.800241910 I0422 19:51:30.224522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-95qk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-95qk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:52:01.023610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:52:01.023606 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 19:52:01.023578304 +0000 UTC m=+683.621405819 I0422 19:52:01.023636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 19:52:01.023632044 +0000 UTC m=+683.621459559 I0422 19:52:01.077747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:52:01.078000 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 19:52:01.077825595 +0000 UTC m=+683.675653120 I0422 19:52:01.357098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:52:01.436199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wcqvf" condition "Approved" to 2026-04-22 19:52:01.436183336 +0000 UTC m=+684.034010871 I0422 19:52:01.465867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wcqvf" condition "Ready" to 2026-04-22 19:52:01.465858581 +0000 UTC m=+684.063686086 I0422 19:52:01.534704 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:52:01.534693622 +0000 UTC m=+684.132521117 I0422 19:52:01.578472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:52:01.578994 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:52:01.578985737 +0000 UTC m=+684.176813252 I0422 19:52:01.626417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:55:44.788313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:55:44.788454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 19:55:44.788445838 +0000 UTC m=+907.386273353 I0422 19:55:44.789328 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 19:55:44.789322411 +0000 UTC m=+907.387149926 I0422 19:55:44.817645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:55:44.817812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 19:55:44.817805101 +0000 UTC m=+907.415632606 I0422 19:55:44.917329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:55:44.955720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k92nc" condition "Approved" to 2026-04-22 19:55:44.955710982 +0000 UTC m=+907.553538487 I0422 19:55:45.079371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k92nc" condition "Ready" to 2026-04-22 19:55:45.079363987 +0000 UTC m=+907.677191482 I0422 19:55:45.213691 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:55:45.213682677 +0000 UTC m=+907.811510202 I0422 19:55:45.241026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:55:45.288800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:56:38.162071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:56:38.162112 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-22 19:56:38.162104466 +0000 UTC m=+960.759931971 I0422 19:56:38.162336 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-22 19:56:38.162086016 +0000 UTC m=+960.759913531 I0422 19:56:38.182559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:56:38.182612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 19:56:38.182623 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-22 19:56:38.182618219 +0000 UTC m=+960.780445724 I0422 19:56:38.394592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:56:38.486394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-56clc" condition "Approved" to 2026-04-22 19:56:38.486379427 +0000 UTC m=+961.084206942 I0422 19:56:38.518351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-56clc" condition "Ready" to 2026-04-22 19:56:38.518338538 +0000 UTC m=+961.116166043 I0422 19:56:38.560286 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:56:38.560271069 +0000 UTC m=+961.158098574 I0422 19:56:38.582485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:56:38.582894 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:56:38.582884957 +0000 UTC m=+961.180712462 I0422 19:56:38.602644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 19:56:38.602921 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 19:56:38.602911515 +0000 UTC m=+961.200739030